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Section I 

INTRODUCTORY REMARKS 

Paragraph 

R6sum6 of preceding information 1 

Sequence of study 2 

1. R6sum$ of preceding information. — a. In Special Text No. 
165 Elementary Military Cryptography, the student was 

given ms first introduction to the study of the more simple means 
and methods of secret writing. Considerable attention was devoted 
to certain preliminary data in the nature of definitions of basic terms 
employed in cryptography and of the general circumstances surround- 
ing the use of cryptography in military communications. The factors 
determining the influence or effect that the analysis of military 
cryptograms will have on the tactical situation were discussed some- 
what in detail, and it was shown that of these factors the most im- 
portant is the degree of cryptographic security inherent in the cryp- 
tographic system itself. This was then discussed in detail in con- 
nection with related factors involved in the length of time required to 
solve military cryptograms. Attention was also directed to infor- 
mation bearing upon the employment of cryptography in our Army, 
and the functions, duties, and responsibilities of the various anus and 
services concerned in it were set forth. Coming then to a discussion 
of certain preliminary details of a practical nature, it was shown that 
systems suitable for the military use must conform to certain more 
or less rigid requirements before they can even be considered for such 
use because of the present-day limitations of the art of signal com- 
munication in general. 

b. Having assimilated all the foregoing data of an introductory 
nature, the student then took up the study of the two principal classes 
of ciyptograms: transposition and substitution. Various examples 
of cipher systems of the transposition class were first illustrate d , these_ 
starting out with the simplest varieties of MOBolitfo at- route trans- 
position and then progressing through more complex types of simple 
columnar and keyword columnar methods. Only a hint was con- 
veyed as to the existence of far more complicated double and triple 
transposition systems. The principal disadvantages of transposition 
methods in general were discussed. Then substitution systems were 
taken up and after a brief discussion of the nature of alphabets in 
general and of the kinds of cipher alphabets in particular, a few 
examples of simple monoalphabetic substitution ciphers were given. 

( 1 ) 
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Methods of producing mixed alphabets were illustrated, and the use of 
sliding basic sequences to derive a set of secondary alphabets was 
described. Cases of monoalphabetic substitution with variants were 
presented and their disadvantages from the point of view of crypto- 
graphic security were discussed. It was stated that despite a multi- 
plicity of values for cipher equivalents, such methods do not yield 
cryptograms of a high degree of security, and for this reason other 
methods of producing a multiplicity of values, based upon true poly- 
alphabetic methods, are more satisfactory. The use of cipher disks 
and cipher tables of various sorts was discussed in connection with 
more complicated types of substitution, and their disadvantages 
pointed out. Mention was made of methods of increasing the degree . 
of cryptographic security by suppressing or eliminating the manifes- 
tations of periodicity in polyalphabetic systems based upon the use 
of a repeating key. These led to a consideration of the development 
and us© of cryptographs and cipher machines, a few of which were 
merely mentioned. 

ie. The category of substitution methods under the heading of code 
systems was then discussed and examples of the various types of code 
words and codebook arrangements given, H r - wae emphasised that 
a b the present tim e code-metibods of cryptography predominate in 
our Arm y , mul t he ' leuauns fui this sit uation outlined. This involved 
■'"•N^a comparison of the advantages and disadvantages of cipher and code 
methods from the point of view of simplicity, rapidity, practicability, 
secrecy, accuracy, and economy. Considerable attention was devoted 
i, to the secrecy requirements of a cryptographic system for military use, 

0 nH ■* m '" r ‘ p^Ti+nd oat that atr fflfiflent p™™ 1 systems offer greater 

a d v a ntages iu tjaweape e fc than d o these <■ ipke r systems whickmay he 
regarded as b e rng - s uihci e n tly- p raetio a b le formilitary use. 
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d. There then followed a brief discussion of the errors which are 
almost inevitable in cryptographic communication, and of methods for 
their suppression and e limin ation. Finally, a summary of the funda- 
mental rules for safeguarding cryptograms was presented. 

e. With the foregoing as a background, a review of which is recom- 
mended, the student is in a position now to take up the study of more 
advanced cryptographic methods. Special emphasis is to be laid 
only upon such systems as are practicable for military use. It is 



of necessary to add. that viewpoints are always undergoing change; 

£ ! • j.j s__n _• j.: „ xl 



3 ^-oi ?what is regarded as wholly impracticable today may, through some 









5 i unforeseen improvement in technique, become feasible tomorrow, 



and it is unwise to condemn a system too hastily. For example, before 
the World War, and indeed for the first two years of that conflict, 
the use of codebooks in the theater of operations was regarded as 
wholly impracticable Colonel Hitt in his Manual for the Solution of 
Military Ciphers, published in 1916, says: 



rs«a, ^ w;iw v. fr. A;.. . ; 

Armu FTt \\ s i v H-v /W. * to* P" >ce.s 

^ \J f '■Vn Q first Wort A W.'i'. OCki<?0, 
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The necessity for exact expression of ideas practically excludes the use of codes 
for military work, although it is possible that a special tactical code might be 
useful for preparation of tactical orders. 

Also, in an official British Army Manual of Cryptography prepared 
in 1914 is found the following statement: 

Codes will first be considered, but as they do not fulfill the conditions required 
of a means of secret communication in the field, they need not be dealt with here 
at length. 

^ \lt need only be pointed out in this connection that today code 
methods pr ed om inate in the secret communication systems of the 
military, naval, and diplomatic services of practically all the large 
nations of the world. Nevertheless, it is likely that within the next 
decade or two the pendulum may onee more swing over-to -the other 
position-end- cipher methods may again come to the fore, especially 
if mechanical and electrical cipher machines are perfected so that 
their operation becomes practicable for general use. It is for this 
reason, if for no other, that the cryptographer who desires to keep 
abreast of progress must devote considerable attention to the more 
complicated cipher methods of the past and present time, for with the 
introduction of mechanical and electrical devices the complexities and 
difficulties of these hand-operated methods may be eliminated/^ 
qn - inatanc e nf this, thnro m a y bo oit ad a aa o thed e aypt e g ia p h y 
which io purely mathematical in ohM wa tar an d w hiah i a ae aa mplio a tod 
when operat e d by hand that it a win an a m i lit a ry a ip haa - woul d b e 
]?rar . t i r . ally j mpn aa ihl a ; y a t, n mnahnninnl dw i iuu fur - p c i furmiug ~fee 
opera ti o n a i nvo l v ed . ia oq i ptogmip h iDg mud daaayptft 
aan bn aonntroatodjamd n aanqaai^ftaiaji<>*ayhiBeyfeaBW& 



m C onsequently, if among the methods to he set 
forth herein certain ones appear to the student to fall outside the 
realm of what is today considered practicable, it should he remem- 
bered that the purpose in describing them is to present for his consid- 
eration various basic cryptographic principles, and not to set forth 
methods that may with a high degree of probability be encountered in 
military cryptography in the . imm ediate future. 

2. Sequence of study. — Just as in the preceding text, transposi- 
tion systems will first be discussed, then substitution systems. Con- 
siderable attention will be devoted to combined substitution and 
transposition methods. Following this will come a description of a 
limited number of cryptographs^ o f tho mo> » " co m p le x typ e, together / 
with a discussion of their present-day limitations. Thereafter, a 
small amount of space will be devoted to code systems, with special 
emphasis upon enciphered code systems. F in a lly, thoro will follo w 
- n diacna»on " f ■ fijgmri n " \ 

S ervice, un d er which cert ain crypto g r a p hi c do rie s - arc co nduc ted. 



V-i > . 
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A. TRANSPOSITION SYSTEMS 



Section II 

MONOPHASE TRANSPOSITION SYSTEMS 



Paragraph 

Transposition systems employing geometric designs 3 

Trapezoidal designs 4 

Triangular designs 5 

Diagonal methods 6 

Interrupted keyword transposition 7 

Permutation method 8 

Transposition method using special figures 9 

S. Transposition systems employing geometric design^— In 



the preceding text brief mention was made of the use of geometric 
designs and figures other than rectangles in producing transposition 
ciphers. It was stated that triangles, trapezoids, and polygons of 
various symmetrical shapes can be employed. Figures of these types 
form connecting links between the methods that use simple rectangu- 
lar designs and the more complicated methods that use figures in 
which transposition takes place along diagonals. 

4. Trapezoidal designs. — a. A trapezoid or, more accurately, a 
truncated triangle, of prearranged dimensions as regards the number 
of cells (which in this case are rhombs) into which it is to be parti- 
tioned, is constructed. There will be left on one Bide of the design a 
series of small triangles which are not to be used for inscribing letters, 
and are therefore crossed off in the design, as shown in Figure 1. 
Only two agreements are necessary in order to fix the dimensions of 
the design: a keyword or keyphrase to determine the number of cells 
at the base of the design, and an understanding as to the height of the 
design expressed in number of cells. The successive horizontal rows 
of cells will decrease by one in number from bottom to top of the 
design. 

In Figure 1, the keyphrase NO CANDY FOR ISSUE is used as a 
basis for deriving a numerical key of 15 elements, and it is assumed 
that by prearrangement it was agreed that the height of the design 
should be eight cells. Therefore, the bottom row has 16 cells, the 
next one upwards, 14, the next, 13, and so on, to the last, with 8 cells. 
The inscription may follow any route agreed upon; in the example, it 
follows the normal manner of writing. The transcription follows the 
numerical key order, yielding this cryptogram: 

ODAIK AEDME HPODV ITEIP NHUET BOBRO 
HDTFS EISNI ETBEF BCBTM ESHGA RTORD 
IRERE AWARR ERTNS IEPVR VASEO FTEDL 
NA 



b. Decryptographing is merely the reverse of cryptographing, there 
being no difficulties provided that the design has been correctly con- 



o^vttrdl ’pi***, A't ' nces ) 

OW, An (UuL ^yOAJJ\JL 

^box.^<£bc. 
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structed. For this purpose cross-section paper will be found useful. 
The analysis of such a cryptogram is somewhat complicated by the 
presence of columns having varying numbers of letters; it may be 
further complicated by following complex routes in inscription. It is 




7 — 9 — 2 — 1 — 8 — 3 - 15 — 5 - 10 - 11 — 6 - 12 - 13 - 14 — 4 



NOCANDIFORISSUE 

Figure l 



also possible to follow a numerical key in the inscription of the plain 
text in horizontal lines; this additional procedure would further 
complicate and delay solution. 

6. Triangular designs. — a. The simplest way of drawing up a 
triangle for ciyptographing is to take cross-section paper, draw a 
square the side of which is equal 
to the length agreed upon as ex- 
pressed in the number of cells, and 
then draw a diagonal cutting the 
large square into two equal tri- 
angles. This is shown in Figure 
2, where the length agreed upon 
is nine, i. e., nine cells per side. 

The letters of the plain text are 
inscribed in accordance with any 
prearranged route, the one illus- 
trated in Figure 3 being a simple 
method wherein the letters are 
inscribed in horizontal lines in the 
normal manner. When so in- 
scribed, the letters in the dia- 
gram will form 2n— 1 columns where n is the number of cells forming 
one of the sides of the square from which the triangle has been 
constructed. The total number of letters that can be inscribed within 

the triangle is the sum of l)+(»— 2)+(n— 3)+ +1. 

For a triangle based upon a side of 9 cells, the sum is 9+8+7+6+ 
5+4+3-1-24-1 =45. The letters may then be transcribed to form the 
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or by following a derived I 
numerical key applied to the base of the triangle. A simple method of ; 
deriving a key of 2n — 1 elements from a key of n elements or letters 
is exemplified herewith. Let the key be DIAGONALS, a word of 
nine letters. Extend this key to 2n — \ places by repetition, and ’ 
then assign numerical values as usual: 

n=9; 2n— 1 = 17 

1-2-3— 4 — 5 — 6-7—8—9-10-11-12-13-14-15-16-17 
Keyword: DIAGONALSDIAGONAL 

Numerical key: 5-9—1—7-15-13—2—11—17 — 6-10 — 3 — 8-16-1 4 4 12 

This numerical key is the one that has been employed in enciphering 
the message in Figure 3. 




Cryptogram: 

RICRC OCSGE D00NI UA00E 
SEYID RTISS DTSNR AUNTN 
PERTR 

Fiooti 3. 

b. By a slight change in procedure it is possible to encipher a mes- 
sage and produce a text which, for the sake of accuracy in special 
cases, is double the original length, but which is self-checking. Sup- 
pose that instead of applying a single numerical key to the base of the 
triangle, a double-length key is applied to the legs, as shown in 
Figure 4. Here the key is TRIANGLES, extended to double length 
by simple repetition, as follows: 

1— 2-3-4— 5-6-7-8—9-10-11-12-13-14-15-16-17-18 
Keyword: TRIANGLES TRIANGLES 

Numerical key: 17-13-7-1-11-5-9-3-15-18-14—8—2-12—6-10 — 4-16 

This key is applied to the legs of the triangle beginning at the lower 
left-hand comer. The transcription then follows key-number order, 
which results in doubling the length of the message but the repeated 
letters are scattered throughout the whole message. In decrypto- 
graphing such a message the clerk merely omits the second occurrence 
of a letter if it agrees (in identity) with its first appearance in the text. 

e. Many variations in inscription and transcription can be em- 
ployed in the case of triangles as well as trapezoids. Some of the 
variations in the case of triangles are shown in Figure 5. ■ 



6 

cryptogram by following another route, 
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6. Diagonal methods. — a. A method involving diagonal trans- 
position which is reported to have been employed by the French 




DRITI DTOGD RANEO RICSN 
CTRNI GENNE ATCSR OSIIR 
SIOET RTUAI POECO TNESS 
DPRCD AURSD 

Figure 4. 

Army in the World War is now to be described. A numerical key is 
derived from a fairly long word or phrase, and a rectangle is con- 
structed, as in Figure 6. The text is inscribed in this rectangle in 




Inscription: Up left side, down right, alternately. 

Transcription: (a) In rows from the base line, left to right and right to left, 
alternately, upwards: 

PISOS RNATU SIERS etc. 

(b) In diagonals from right leg, in key-number order: 

RIEDR OUAYN etc. 

(c) In rows from left leg, in key-number order: 

CTGEO YTCEU etc. 

(d) From columns in key-number order: 

CNROI TUGRU etc. 

Figure 6. 

normal fashion, nulls being employed, if necessary, to complete the 
last line of the rectangle. 

b. The correspondents agree beforehand upon several diagonals 
which run from left to right, and from right to left and which inter- 
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sect, thus cutting up the design quite thoroughly. In Figure 6 let 
these selected diagonals be those indicated by the numbers from 1 to 
6, inclusive, the odd ones indicating diagonals running from left to 
right. In the transcription, the letters along the indicated diagonals 
are first set down in groups of five, proceeding in key-number order. 
Correspondents must also agree beforehand as to whether a letter 
which lies at the intersection of two diagonals will be taken both times 
it is encountered or taken only once and, if so, whether on its first or 
second appearance. After all these letters have been written down, 
one then proceeds with the remaining letters in the usual columnar 
manner, omittin g the letters which have already been taken, or, 
again, if specially agreed upon, repeating them every time they are 
encountered. If the latter is done, the inclusion of such letters not 
only serves as a check upon accuracy but also materially increases the 
diffi culties of solution, since in this case these letters act like nulls. 
The cryptographing process will become clear upon the study of the 
example in Figure 6. 

Message: ENEMY BATTERY LOCATED AT WOODS 1,000 YARDS 
SOUTHEAST OF MUMMASBURG HEAVY ARTILLERY 
STOP THEY ARE FIRING AT RATE OF THREE ROUNDS 
PER MINUTE FOR THE BATTERY X WILLS, MAJ. 

Keyphrase: MIDNIGHT RIDE OF PAUL REVERE. 

Enciphering diagram: 



M IDN IG H T R IDE OF PA U L RE VE RE 
15-11-2-16-12-9-10-22-19-13-5-4-17-8-18-1-23-14-20-5-24-6-21-7 
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Cryptogram: 

ADARR SESAR NUANX YAAPH HAURA UWYPW 
RHED0 TETFS HETBE RT0IL TGIMO EITJO 
YRURB TMSFT AHUTT NSLAE YEFYO RESTE 
AESII EDLRT MNORE OLDYO ECAGR YTUMR 
BDSVE LOHTN ATOMO ETEFS TANM 



Fioube 6. 
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7. Interrupted keyword transposition. — a. This method of 
transposition is a development of a more simple method wherein the 
transposition follows a numerical key. The latter must first be 
described. A keyword or keyphrase of fair length is selected and a 
numerical key derived from it. Let this key be the phrase UNI- 
FORMITY OF METHOD. 

Keyphrase: U NIFO RMIT Y OFMETHOD 

Numerical key: 17-10-6-3-11-14-8-7-15-18-12-4-9-2-16-5-13-1 



9 
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The plain text is then written out in horizontal lines corresponding 
to the length of the key; then transposition is effected within each row, 
according to the sequence of numbers applicable, as shown in Figure 7. 

Message: ADMINISTRATIVE ORDERS MUST BE COMPLETED AND 
READY TO ACCOMPANY FIELD ORDERS NOT LATER 
THAN 5:00 P.M. THIS DATE. 

Enciphering diagram: 

17-10-6-5-11-14-8-7-15-18-12-4-9-2-16-5-13-1 
A DMIN ISTR A TIVEORDE 

R SMUS TBEC 0 MPLETEDA 

N DREA DYTO A CCOMPANY 

F IELD ORDE R SNOTLATE 

R THAN FIVE P MTHISDAT 

E 

Cryptogram: 

EEIIR MTSVD NTDIR OAAAE UPEME BLSSM 
DTCTR OYMEC ARTYO DACND OPNAE TLNAE 
DROID STOEL FRTIA TDHVI HTNMA FESRP 
E 

FlOUBX 7. 

b. In the foregoing case the encipherment takes place only by 
transposition within rows, but it is possible to complicate the method 
by transposing, in addition, the rows as a whole, employing the same 
key or only a portion of it, as much as is required. Thus, if the mes- 
sage contained 18 rows of 18 letters each, then the transposition of 
rows could be effected according to key-number order, the last row 
being taken first (since the number 1 of the numerical key happens 
in this case to be at the end of the numerical key), the 14th row being 
taken second (since the number 2 of the numerical key is the 14th 
number), and so on. Where the message does not contain as many 
complete rows as there are numbers in the key, the transposition 
takes place in key-number order nevertheless, the rows being taken 
in the numerical order of the numbers present. Using the same key 
and message as in the foregoing case, the encipherment would be as 
shown in Figure 8. 

Enciphering diagram: 

17-10—6-5-11—14-8-7—15-18-12—4-9-2-16-5-13-1 
17: A DMIN ISTR A TIVEORDE 

10: R SMUS TBEC 0 MPLETEDA 

6: N DREA DYTO A CCOMPANY 

3: F IELD ORDE R SNOTLATE 

11: R THAN FIVE P MTHISDAT 

14: E 

Cryptogram: 

ETLNA EDR0I DST0E LFRYM ECART Y0DAC 
ND0PN AAEUP EMEBL SSMDT CTR0T IATDH 
VIHTN MAFES RPEEE IIRMT SVDNT DIROA 



Figure g. 
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c. From the preceding method it is but a step to the method of | 
interrupted key transposition now to be described. Instead of writing \ 
the text in regular-length groups corresponding to the length of the 
key, it is written out in irregular groups the lengths of which vary 
according to some prearranged plan. For example, note the basis of 
the variable grouping in the following diagram, which uses the same 
message and key as under a above: 

Enciphering diagram: 



17-10—6—3-11-14—8—7-15-18-12 — 4 - 9—2-16—5-13—1 
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17—10 — 6 — 3-1 1- 
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Cryptogram (columnar transposition in key-number sequence) : 

EEEDI UAEAT XIIPC OERRM MDRPO AFHTE 
TIHTS BYFTP AVLRP DSEDM NLNTN SANEV 
STMCD CDITD YREDR C0EE0 EARTN OSTAU 
AOALL 

Fiousk 9. 

d. This method may be combined with that shown under b above, 
thus further complicating the system. In decryptographing such a 
message it is best to use cross-section paper, block out the cells to be 
occupied by letters in the deciphering diagram, and indicate the key 
numbers applicable to each line. This will facilitate the process mate- 
rially and help eliminate errors. 

e. Another method of interrupted transposition is that which 
employs a rather long sequence of digits to control the interruption. 
In order to avoid the necessity of carrying around such a written 
sequence, it is possible to agree upon a number whose reciprocal when 
converted by actual division into its equivalent decimal number will 
give a long series of digits. For example, the reciprocal of 7, or 1/7, 
yields a repeating sequence of six digits: 142857142857 . . .; the 
reciprocal of 49, 1/49, yields a repeating sequence of 42 digits, etc. 

(•The four final letters LCEF are nulls, to oomplete the row.) 
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Zeros, when they appear, are omitted from the sequence. Suppose the 
number 19 is agreed upon, the reciprocal of which yields the sequence 
(0)52631578947368421. On cross-section paper mark off sets of cells 
corresponding in number to the successive digits. Thus: 





5 2 6 


3 1 5 


1 1 I 


1 1 IXI I IXI I I I 


1 IXI 1 1 IXI XI | | | |e 


Let the message be ATTACK HAS BEEN POSTPONED. 


Encipherment: 

5 2 


6 3 1 5 


I A H|E|S|0|X|T|A|X|T|S|N|T|N|D|X|A|B]P|X|C|X|K|E|0|P|E| 



etc. 



Cryptogram: 

AHESO TATSN TNDAB PCKEO PE 



/. To decryptograph such a message, the cryptogram is written 
down in a series of cross-section cells, which are then blocked off in 
sets according to the numerical key: 



5 2 6 3 1 6 

|A|h|E|S|0|X|T|a|X|T|S|n|t|n]d1X|A|B|P1X|C|X|K|e|q|P|e 1 



Taking the letters in consecutive order out of the successive sets, and 
crossing them off the series at the same time as they are being written 
down to construct the plain text, the message is found to begin with 
the following two words: 



5 2 6 3 1 6 

|jM|ElS|0|Xlt|]llXlt|$|N|T|N|P|Xli|Brp|XlfrlX|<|ElO|P|E | 



ATTACK HAS . . . 



g. Preparatory to cryptographing, it is necessary to find the length 
of the message to be enciphered and then to mark off as many cells as 
will be required for encipherment. Nulls are used to fill in cells that 
are not occupied after enciphering the whole message. The secrecy of 
the method depends, of course, upon the reciprocal selected, but there 
is no reason why any fraction that will yield a long series of digits 
cannot be employed. If the selection of key numbers were restricted 
to reciprocals, the secrecy would be more limited in scope than is 
. actually necessitated by the method itself. 

8. Permutation method. — a. An old method, known in litera- 
ture as the aerial telegraphy method, 1 forms the basis of this system. 

1 So named because it was first devised and employed in messages transmitted 
by a system of semaphore signaling in practical usage in Europe before the 
1 ^electrical telegraph was invented. 
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A set of permutations of 3 4, ... 9 digits is agreed upon and 
these permutations are listed in a definite series. As an example, let 
these permutations be made of the digits 1 to 5, selecting only four 
of the possible 120. Suppose those selected are the following, set 
down in successive lines of the diagram in Figure 10a: 



Permutation 



2 3 15 4 


2 


3 


1 


5 


4 


? K 1 A 


3 


2 


5 


1 


4 


15 3 9 4 


1 


5 


3 


2 


4 


4 3 15 2 


4 


3 


1 


5 


2 



i'lQUKl 10a. 



The letters of the plain text, taken in sets of fives, are distributed 
within the sections of the diagram in accordance with the permuta- 
tions indicated above the sections and also at the left. Thus, the 
first five letters of the text, supposing them to be the initial letters of 
the word RECOMMENDATIONS, are inserted in the following 
positions: 



Permutation 




The next five letters are inscribed in the second line of the diagram 
in the sections indicated by the permutation above and at the left of 
the line. Thus: 



Permutation 



2 3 15 4 


2 

E 


3 

C 


1 

R 


5 

M 


4 

0 


X O R 1 A 


3 


2 


5 


1 


4 




N 


E 


A 


M 


D 



This process is continued for each line and for as many lines as there 
are permutations indicated at the left. In the foregoing case, after 
twenty letters have been inserted, one inserts a second set of five 
letters again on the first line, placing the letters of this second set 
immediately to the light of those of the first set, respectively in key- 
number order. The succeeding lines are treated in similar fashion 
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until the whole message has been enciphered. The following example 
will illustrate the process: 

Message: RECOMMENDATIONS FOR LOCATIONS OF NEW 
BALLOON POSITIONS MUST BE SUBMITTED 
BEFORE 12TH AIRDROME COMPANY CHANGES 
COMMAND POST TOMORROW. 

Enciphering diagram: 



Permutation 



2 3 15 4 


2 


3 


1 


5 


4 


EASEOM 


CTIDMA 


RCOTRM 


MOIECD 


OITBEN 


3 2 5 1 4 


3 


2 


5 


1 


4 


NOSRPS 


ESNOMO 


ANUTNT 


MNOFOP 


DFMEAT 


1 5 3 2 4 


1 


5 


3 


2 


4 


TESWYO 


SLSTNR 


0BBLH0 


IWTECM 


NAEFAR 


4 3 15 2 


4 


3 


1 


5 


2 


LNIRCB* 


ROMISC* 


FLUHGO 







• The letters B, C, and D are nulls, to complete the figure. 

Figuki 10b. 



The letters of the cipher text are taken from the diagram according 
to any prearranged route, the most simple being to transcribe the 
lines of letters in groups of fives, thus: 

EASEO MCTID MARCO TRMMO IECDO ITBEN 
NOSRP SESNO MOANU TNTMN 0F0PD FMEAT 
TESWY OSLST NROBB LHOIW TECMN AEFAR 
LNIRC BROME SCFLU HG00P TDODO OBAEW 

ft. The foregoing method when employed in its most simple form 
does not yield cryptograms of even a moderate degree of security; 
but if the method of inscription and transcription is varied and made 
more complex, the degree of security may be increased quite notice- 
ably. It is possible to use longer permutations, based on sets of 6, 
7, 8, or 9 digits, but in every case the successive permutations must 
be prearranged as regards both their exact composition and their 
order or arrangement in the diagram. 

9. Transposition method using special figures. — a. The 
method now to be described is useful only in special cases where the 
correspondence is restricted to brief communications between a very 
limited number of persons. It is necessary to agree in advance on 
certain particulars, as will be seen. Let the message to be enciphered 
be the following: 

FOUR TRANSPORTS WILL BE COMPLETED BY END 
OF APRIL AND SIX MORE BY END OF JULY. 

119555 35 2 
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Note the following figures and encipherment: 




Cryptogram: 

ORPSL OFUTA SOTWL BCMRN RIEPE BDPAI 
LTDYN OARLN SXEEF IDMRE FYOEY NOJLB 
DU 

Floras 11. 

b. It will be noted that it is essential to agree in advance not only 
upon the nature of the figure but also upon the number of figures per 
line. 

c. The next series is a modification of the preceding. The same 
message will be employed, with a double-cross figure, five figures per 
line. 




Cryptogram: 

OUPOL BETDO FRSRL ELENF NTITP CEDIA 
ARWSM OYBRP AKREF JLDOB OUMSD YLXIN 
EY 

Fiqdbe 12. 
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d. Still another series may be formed, as follows: 



l ; 

\\ ^ 


i 


3 


I 


1 






_ fa T - 





T. T 


•> T 


ft 


I- " H 


— 0 X 


X X 










TT V 


o u 




I H 


o 


i — ' 


p g 


a o 


X B 






3 


3 


1 c 


! 3 


> i 


i 


I 


< 


c 








ia 


, — 


H 


J 






M — 


ST 


X 


J 






A — 


n « - 


B T 


u 






1""“ — 
1 

1 


1 


] 


i 







Cryptogram: 

FSLLN NOIPP LEEID AUWOU BYTRO HRSRO 
EBEPF TTCDA LOOMA DRFXN NEJID EBYUS 
YL 

■ PlQUBK 13. 

e. A figure of different form than the preceding forms the basis of 
: the next type. 



OOEDRtOYRWPHlJLX 




FPBEURCBTSMEAILD3L.T 



FHROPSBJIXEL 




OAODADEFRIYULHHY 



Cryptogram: 

OOEDR TOYRW PNNLE FPBEU RCBTS 
MEAIL DSLTF NROPS BJIXE LOAOD 
ADEFR IYULM NY 

Fiaira* 14. 

f. From the foregoing examples, it is obvious that many other 
figures may be used for effective transpositions of this kind, such as 
stars of varying numbers of points, polygons of various symmetrical 
shapes, etc. It is merely necessary to agree upon the figures, the 
number of figures per line, the starting points of the inscription and 
transcription processes. 

g. The method lends itself readily to combination with simple 
monoalphabetic substitution, yielding cryptograms of a rather high 
degree of security. 
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Section III 

POLYPHASE TKANSPOSITION SYSTEMS 

Paragrai 



Polyphase transposition methods in general 1 

True and false polyphase transpositions 1 

True double transposition 1 



10. Polyphase transposition methods in general. — a. 1: 
paragraph 32 of Special Text No. 165, brief mention was made c 
transposition systems in which two or more processes of rearrange 
ment are involved. It was stated that only a very limited numbe 
of such transposition methods are practicable for military use, bu 
that the degree of security afforded by them is considerably greate 
than that afforded by certain much more complicated substitutio] 
methods. The methods referred to are those which involve two o 
more successive transpositions, and merely for purposes of brevity 
in reference they will here be called polyphase transposition method ' 
to distinguish them from the single monophase methods thus fa 
described. 

b. It is obvious that a polyphase transposition method may involvi 
2, 3, . . . successive transpositions of the letters of the plan 
text. To describe these methods in general terms, one may indicab 
that the letters resulting from a first transposition, designated as thi 
T-l transposition, form the basis of a second, or T-2 transposition 
If the process is continued, there may be T~3, T-4 . . . trans 
positions, and each may involve the use of a geometric figure oi 
design. For convenience, the design involved in accomplishing th< 
T-l transposition may be designated as the D~1 design; thatinvolvet 
in accomplishing the T-2 transposition as the D-2 design, etc 
However, it may as well' be stated at this point, that so far as militan 
cryptography is concerned, methods which involve more than D-l 
and T-2 elements are entirely impractical and often those whicl 
involve no more than D-2 and T-2 elements are also impracticabli 
for such use. 

11. True and false polyphase transpositions. — a. It is pos 
sible to perform two or more transpositions with the letters of a tex 
and yet the final cryptogram will be no more difficult to solve than i 
only a single transposition had been effected. The equivalent of this h 
the case of substitution ciphers is to encipher a monoalphabetic crypto 
gram by means of a second single alphabet; the final result is still i 
monoalphabetic substitution cipher. Likewise, if a message has beei 
enciphered by a simple form of route transposition and a second am 
similar or approximately similar form of simple route transpositku 
is again applied to the text of the first transposition, the final text i 
still that of a monophase transposition cipher. Again, two transpo 
sitions may be accomplished without really affecting a most thorougl 
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s crambling of the letters composing the original text. Examples 
will serve to clarify the difference between false and true polyphase 
transposition. 

b. Note the following simple columnar transposition cipher pre- 
pared according to the method described in paragraph 26 of Special 
Text No. 166: 

Message: DELIVER ALL AMMUNITION TO 4TH DIVISION 
DUMP 

Keyword: SCHEDtILE~S_°_H E DOLE 



Enciphering rectangle: 

7 1 



5 3 2 8 6 4 



D 


E 


L 


I 


V 


E 


R 


A 


L 


L 


A 


U 


U 


U 


N 


I 


T 


1 


0 


N 


T 


0 


F 


0 


U 


R 


T 


H 


D 


I 


V 


I 


S 


I 


0 


N 


D 


U 


M 


P 



D-l 



Cryptogram (T-l): 

ELIRI VMTDD IMNHN AI0IP LA0T0 RNFVM 
DLTUS EUOIU 

Fiodbi 15. 

In producing the foregoing cryptogram only the columns were 
transposed. Suppose that by prearrangement, using the keyword 
BREAK (derived numerical key=2-5-3-l-4), the horizontal lines 
of the foregoing enciphering rectangle were also to be transposed. 
For example, let the horizontal lines of the rectangle D-l be trans- 
posed immediately before taking the letters out of the columns of the 
design (in key-number order) to form the cipher text. Thus: 



7 1 



3 2 3 6 4 



2 


D 


E 


L 


I 


V 


E 


R 


A 


5 


L 


L 


A 


M 


u 


U 


N 


I 


3 


T 


1 


0 


N 


T 


0 


F 


0 


1 


U 


R 


T 


H 


D 


I 


V 


I 


4 


S 


I 


0 


N 


D 


u 


M 


P 



U 


R 


T 


H 


D 


I 


V 


I 


D 


E 


L 


I 


V 


E 


R 


A 


T 


I 


0 


N 


T 


0 


F 


0 


S 


I 


0 


N 


D 


U 


M 


P 


L 


L 


A 


M 


M 


U 


N 


I 



D-l 

Cryptogram (T-2): 



D-2 



REIIL DVTDM HINNM IA0PI TL00A VRFMN 
UDTSL IEOUU 

Figure 16. 
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c. The foregoing, however, is not a case of true polyphase or so-l 
called double transposition. The same final result may be accom-j 
plished in a way which will at first glance appear quite different but is! 
in reality one that accomplishes the same two operations by combin- 1 
ing them in one operation. Let the message be inscribed as before, 1 
but this time with both numerical keys applied to the top and sidej 
of the rectangle. Then let another rectangle of the same dimensions,] 
but with numbers in straight sequence instead of key-number sequence, ' 
be set alongside it. Thus: 





7 


1 


5 


3 


2 


8 


6 


4 


2 


D 


E 


L 


I 


V 


E 


R 


A 


5 


L 


L 


A 


U 


u 


U 


N 


I 


3 


T 


I 


0 


N 


T 


0 


F 


0 


1 


U 


R 


T 


H 


D 


I 


V 


1 


4 


S 


I 


0 


N 


D 


U 


M 


P 



D-l 




D-2 



Floras 17. 



Each letter in D-l is now transferred to that cell in D-2 which is 
indicated by the row and column indicators of the letter in D-l. 
For example, the first letter, D, of D-l, has the indicators 2-7 and 
it is placed in the 2-7 cell in D-2; the second letter of D-l, which is 
E, is placed in the 2-1 cell of D-2, and so on. The final result is as 
follows: 





7 


1 


5 


3 


2 


8 


6 


4 




1 


2 


3 


4 


5 


6 


7 


8 


2 


□ 


13 


B 


B 


B 


B 


R 


El 


i 


R 


D 


H 


I 


T 


V 


U 


I 


6 


D 


□ 


B 


B 


B 


B 


N 




2 


E 


V 


I 


A 


L 


R 


D 


E 


3 


D 


B 


B 


B 


B 


9 


F 




3 


I 


T 


N 


0 


0 


F 


T 


0 


1 




□ 




□ 


B 


B 


V 


Q 


4 


I 


D 


N 


P 


0 


U 


S 


U 


4 


□ 


B 


D 


B 


D 


B 


B 




5 


L 


M 


H 


I 


A 


N 


L 


U 



D-l D-2 



Flora* 18. 



! 



It wifi be seen that if the columns of D-2 are now read downwards 
in straight order from left to right the final cryptogram is identical 
with that obtained under b above: REIIL DVTDM, etc. 

d. The foregoing cipher, often called the Nihilist Cipher, is referred 
to in some of the older literature as a double transposition cipher 
because it involves a transposition of both columns and rows; and 
indeed as described under b above it seems to involve a double process. 
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It is, however, not an example of true double transposition. When 
the mec hanism of this cipher is compared with that now to be 
described, the great difference in the cryptographic security of the two 
methods will become apparent. 

12. True double transposition. — In the form of the false double 
transposition described above, it is only entire columns and entire 
rows that are transposed. The disarrangement of the letters is after 
all not very thorough. In true double transposition this is no longer 
the case, for here the letters of columns and rows become so thor- 
oughly rearranged that the final text presents a complete scrambling 
almost as though the letters of the message had been tossed into a hat 
and then drawn out at random. 

Section IV 

TRUE DOUBLE TRANSPOSITION 

Paragraph 

True double transposition of the columnar type 13 ■ . . 

General remarks on true pslyphsuo transposition .. 14 f . 

13. True double transposition of the columnar type. — a. It is 
by what is apparently a simple modification of certain of the co- 
lumnar methods already described that an exceedingly good true 
double transposition can be effected. Let a numerical key be derived 
from a keyword in the usual manner and let the message be written 
out under this key to form a rectangle in the usual manner for colum- 
nar transposition. The length of the message itself determines the 
exact dimensions of the rectangle thus formed, and whether or not it 
is completely or incompletely filled. 

b. In its most effective form the double transposition is based upon 
an incompletely filed rectangle; that is, one in which one or more cells 
in the last line remain unfilled. An example of the method now follows. 

Let the keyword be INTERNATIONAL; the message to be enciph- 
ered, as follows: 

OUR ATTACK SLOWING UP IN FRONT OF HTTE 1000 
YARDS SOUTHEAST OF GOLDENVILLE STOP RE- 
QUEST PROMPT REENFORCEMENT. 

Keyword: INTERNATIONAL 

Derived numerical key: 4-7-12-3-11-8-1-13-5-10-9-2-6 

The first, or D-l, rectangle is inscribed in the usual manner of simple 
numerical key columnar transposition. It is shown as D-l in the 
accompanying figure. The letters of the T-l transposition are then 
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4-7—12-3—11-8—1—13-5- 10-9—2—6 



0 


U 


R 


A 


T 


T 
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K 


S 


L 


0 


W 


I 


N 


G 
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P 
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Y 


A 


R 


D 


S 


S 


0 


u 


T 


H 


E 


A 


S 


T 


0 


F 


G 


0 


L 


D 


E 


N 


V 


I 


L 


L 


E 


S 


T 


0 


P 


R 


E 


Q 


U 


E 


S 


T 


P 


R 


0 


M 


P 
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R 


E 


E 


N 


F 


0 


R 


C 


E 


M 


E 


N 


T 













D-l 



4-7—12-3—11-8—1—13-5- 10 -9—2—6 



A 


N 


N 


D 


G 


0 


P 


N 


o 


T 


u 


T 


N 


U 


N 






















































































































































• 































D-2 

Figube 19a. 



inscribed in the second, or D-2, rectangle in the normal manner oj 
writing, that is, from left to right and from the top downwards. This 
is shown in D-2 of Figure 19a for the first two columns of D-l (in 
numerical key order) after transfer of their letters into D-2. The 
letters of the remaining columns of D-l are transferred in the same 
manner into D-2, yielding the following rectangle: 
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4 — 7—12 - 3—11 - 8 — 1—13 - 5 - 10 - 9 — 2 — 6 
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D 
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0 
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N 


B 


B 


U 
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N 


U 


N 


A 


U 
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□ 
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E 


L 
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0 
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E 


Q 
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H 


B 


D 


E 


E 
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B 


B 




B 











Floras 19b. 



For the T-2 text the letters are transcribed from the D-2 rectangle, 
reading down the columns in key-number order, and grouping the 
letters in fives. The cryptogram is as follows: 

PTRUT OGTTI RLOPP DUSVO SOSAU AOREA 
CORSH EEDNF WTULC NNEST QOFOY KFFHR 
PUORA NTLTE LNLES GLOER OMONA IHIES 
ENETN MDIT 



e. In paragraph 28 of Special Text No. 165 a variation of the simple 
columnar key method of transposition was described. If the process 
therein indicated is repeated, double transposition is effected. The 
following example will serve to illustrate the method, using the same 
message and key as were used in the paragraph to which reference 
was made: 



Message: REQUEST IMMEDIATE REENFORCEMENTS 

Keyword: PRODUCT 

Derived numerical key: 4-5-3-2-7-1-6 

Encipherment: 



4-5-3— 2— 7— 1-6 
Text: REQUEST 
T-l: S I N E U E E 
T-2: E R E E E R E 



4-5— 3-2— 7— 1-6 
I M M E D I A 
E Q M R C R I 
F N M T A S E 



4-5-3— 2— 7— 1-6 
T E R E E N F 
T 0 T E H E R 
T S E I Q 0 T 



4_5_3_ 2-7-1-6 4-5 
ORCEMEN TS 
STAFNED EH 
MEIRDUC UN 

Cryptogram: 

EREEE REFNM TASET SEIQO THEIR 
DUCHN 

































































REF ID:A64690 



22 



d. In some respects this modified method is simpler for the novice tc 
perform correctly than is that employing rectangles. Experience has 
shown that many inexpert cryptographic clerks fail to perform the two 
transpositions correctly when D-l and D-2 rectangles are employed 
in the work. 



14. General remarks on true. 



transposition. 



The cryptographic security of the true double transposition method 
deserves discussion. Careful study of a cryptogram enciphered by the 
double transposition method set forth in paragraph 136 and c wil] 
convince the student that an extremely thorough scrambling of the 
letters is indeed brought about by the method. Basically, its principle 
is the splitting up of the adjacent or successive letters constituting 
the plain text by two sets of “cuts ”, the second of which is in a direc- 
tion that is perpendicular to the first, with the individual “cuts” oi 
both sets arranged in a variable and irregular order. It is well adapted 
for a regular and voluminous exchange of cryptograms between corre- 
spondents, because even if many messages in the same key are inter- 
cepted, so long as no two messages are identical in length, they can only 
be cryptoanalyzed after considerable effort. 

6. Triple and quadruple transpositions of the same nature are 
possible but not practical for serious usage. Theoretically, a continu- 
ation or repetition of the transposition process will ultimately bring 
about a condition wherein the D-n rectangle is identical with the 
D-l rectangle; in other words, after a certain number of trans- 
positions the rectangle produced by a repetition of the crypto- 
graphing process results finally in decryptographing the message, 
Exactly how many repetitive transpositions intervene in such cases is 
extremely variable and depends upon factors lying outside the scope 
of this text. 

c. In the example of cryptographing given in paragraph 136, the 
D-l and D-2 rectangles are identical in dimensions, and identical 
numerical keys are applied to effect the T-l and T-2 transpositions 
It is obvious, however, that is it not necessary to maintain these 
identities; D-l and D-2 rectangles of different dimensions maj 
readily be employed, and even if it is agreed to have the dimensiom 
identical, the numerical keys for the two transpositions may be differ- 
^ enk\ Furthuim e i U) it iu pu^sibte to a d d e tho s vniritiblo ol a mow tsr — (1 1 

. ml- _ ! M ■ . <1 . l.i.A * ll TV ■» J- .1 . 






The direction or manner of inscribing the letters in the D-l rectangh 
may be varied; (2) the direction of reading off or taking the letters oui 
of the D-l rectangle in effecting the T-l transposition, that is, ii 
transferring them into the D-2 rectangle, may be varied; (3) th< 
direction of inscribing these letters in the D-2 rectangle may b< 
varied; (4) the direction of reading off or taking the letters out of th< 
, D-2 r ectangle in effecting the T-2 transposition may be varied 

' ~ 'SSMfig^one or more nulls may be inscribed at the end of either th< 
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J>-1 or the D-2 rectangle (but not both) in order that the total 
number of letters involved in the two transpositions be different, a 
factor which still further increases the degree of cryptographic 
security. 

^ The solution of cryptograms enciphered upon the double trails- 
position principle is often made possible by the presence of certain 
plain-text combinations, such as QIT and CH (in German). For this 
reason, careful cryptographers substitute a single letter for such 
combinations, as decided upon by preagreement. For example, in 
one case the letter Q was invariably used as a substitute for the 
compound CH, with good effect. 

Section V 

GRILLES AND OTHtTft Tj? R oF MATRICES 

Paragraph 

Types of cryptographic grilles 15 

Simple grilles 16 

Revolving grilles 17 

Grilles of other geometric forms , 18 

Polyphase transposition by grilles 19 

Increasing the security of revolving grilles 20 

Construction of revolving grilles 21 

Nonperforated grilles : 22 

Rectangular or “post card” grilles., 23 






5.' Typfes of cryptographic grilles. — Broadly speaking, crypto- 
graphic grilles 1 are sheets of paper, cardboard, or thin metal in which 
perforations have been made for the uncovering of spaces in which 
letters (or groups of letters, syllables, entire words) may be written 
on another sheet of paper upon which the grille is superimposed. 
This latter sheet, usually made also of cross-section paper, will here- 
after be designated for purposes of brevity in reference as the grille 
grid, or grid. Its external dimensions are the same as those of the 
grille. Grilles are of several types depending upon their construc- 
tion and manner of employment. They will be treated here under 
the titles of (1) simple grilles, (2) revolving grilles, (3) nonperforated 
grilles, and (4) “post card” grilles. 

16. Simple grilles. — a. These consist usually of a square in which 
holes or apertures have been cut in prearranged positions. When 
the grille is superimposed upon the grid, these apertures disclose cells 
on the grid, in which cells letters, groups of letters, syllables, or entire 
words may be inscribed. An example is shown in Figure 20. The 
four sides of the obverse surface of the grille are designated by the 
figures 1, 2, 3, 4; the four sides of the reverse surface, by the figures 

1 Also often called “stencils.” 
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i 

5, 6, 7, 8. These figures are employed to indicate the position of thei 
grille upon the grid in encipherment. 

b. (1) In cryptographing a message the grille is placed upon the 
grid, in one of the eight possible positions: Obverse surface up, with; 




I 



figure 1, 2, 3, or 4 at the top left; or reverse surface up, with figure 5, 
6, 7, or 8 at the top left. The letters of the plain text are then 
inscribed in the cells disclosed by the apertures, following any pre- 
arranged route. In Figure 21, the normal manner of writing, from 
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he 

he 

th 



left to right, and from the top downwards, has been followed h. 
inscription, the message being ALL DESTROYERS OUTSIDE. 







Figure 21 . 



(2) The transcription process now follows. The cipher text is 
written down, the letters being taken by following any prearranged 
route, which must be perpendicular to the route of inscription, other- 
wise the letters will follow in plain-text order. In the following, the 
route is by columns from left to right. 

] Cryptogram: 

j LRTAD TSSER YOIDS ELOEU 



(3) If the number of letters of the plain-text message exceeds the 
number of cells disclosed by one placement of the grille, the letters 
given by this placement are written down (in cryptographic order), 
and then the grille is placed in the next position on a fresh grid; the 
process is continued in this manner until the entire message has been 
cryptographed. The several sections of the cipher letters resulting 
from the placements of the grille on successive grids merely follow 
each other in the final cryptogram. In this manner of employment 
it is only necessary for the correspondents to agree upon the initial 
position of the grille and its successive positions or placements. 

c. It is obvious that by the use of a simple grille the letters of a 
message to be cryptographed may be distributed within an enveloping 
message consisting mostly of “dummy ” text, inserted for purposes of 
enabling the message to escape suppression in censorship. For 
example, suppose the grille shown in Figure 20 is employed in position 
l and the message to be conveyed is ALL DESTROYERS OUTSIDE. 
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The letters of this message are inscribed in their proper places on the! i 
grid, exactly as shown in Figure 21. An “open” or disguising text* j. 
is now to be composed; the latter serving as an envelope or “cover” ! 
for the letters of the secret text, which remain in the positions in ! 
which they fall on the grid. The open or disguising text, in other | 
words, is built around or superimposed on the secret text. Note how | 
this is done in Figure 22, with an apparently innocent message; [ 
reading: ! 

I HAVE WORKED VERY WELL ALL DAY, TRYING TO : \ 
GET EVERYTHING STRAIGHTENED UP BEFORE GOING | ! 
ON MY NEXT TRIP SOUTH, BUT INSIDE TEN DAYS ... j j. 



1 (5) 
I H 



R K E 



LLDAYTRYIN 

GTOGETEVER 

YTHINGSTRA 

IGHTENEDUP 

BEFOREGOIN 

GONMYNEXTT 

^RIPSOUTHBU 

<£> 

nTINSIDETEN 



d. The foregoing method naturally requires the transmission of 
considerably more text than is actually necessary for conveying the 
message intended. Where questions of censorship are not involved, 
the method is therefore impractical. A modification of the method 
suggests itself in the use of a transparent sheet of paper superimposed 
upon a square or other figure in which the individual cells are irregu- j 
larly numbered and the inscription process follows the sequence of > 
numbers. An example is shown in Figure 23, using the message ! 
ROCK CREEK BRIDGE WILL BE DESTROYED WHEN j 
TAIL HAS CROSSED. j 



} 




The transcription may now follow any prearranged route. The 
normal method of reading would produce the cryptogram beginning 
WCTEH OEERI, etc. It is obvious that the correspondents must 
possess designs with identically numbered cells. 1 

17. Revolving grilles. — a. In this type of grille (see fig. 24a) 
the apertures are also formed by perforating a sheet of cross-section 
paper according to prearrangement, but these apertures are so dis- 
tributed that when the grille is turned four times successively through 
angles of 90° and set in four grille positions on the grid, all the cells on 
the grid are disclosed in turn. (The preparation of such grilles will 
be discussed in par. 21 .) If letters are inserted in the cells so disclosed, 
then after a complete revolution of the grille every one of the cells of 
the grid will contain a letter and thus the grid will be completely 
fiHed. For this reason such a grille is also called a selj-jilling, or an 
aulomatitMompletian grille. The secrecy of messages enciphered by 
its means is dependent upon the distribution or position of the aper- 
tures, the sequence of grille positions on the grid (i. e., whether in the 
order 1, 2, 3, 4 clockwise; or 1, 3, 4, 2 etc.), and the route followed in 
inscribing and transcribing the letters in the cells of the grid. For each 
position of the grille, one-fourth the total number of letters of the 
text is inscribed; hence it is convenient to refer to “sections” of the 
text, it being understood that each section consists of one-fourth the 
total number of letters. 

b. There are two possible procedures so far as the inscription-tran- 
scription sequence is concerned. (1) The letters of the plain text may 
be inscribed in the cells of the grid through the apertures disclosed by 
the grille and then, when the grid has been completely filled, the 
grille removed, and the letters transcribed from the grid according to a 
prearranged route; or, (2) the letters of the plain text may first be 
inscribed in the cells of the grid according to a prearranged route and 
then the grille applied to the completely-filled grid to give the sequence 

1 The system employed by the French Army in 1886 was of the nature here 
facribed. 
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of letters forming the cipher text of the transcription process. Tb 
first method will be described in c below ; the second in e below. 

c. Taking the simplest manner of inscribing the letters, that is 
from left to right and from the top downwards, the letters of the firsi 
section of the text are inscribed in the cells disclosed by the apertures 
the grille being in the first position. This is shown in Figure 24b 
The grille is then given % turn clockwise, bringing Figure 2 to the top 
left. If the grille has been correctly prepared, none of the cells dis- 
closed in the second grille position on the grid will be occupied by a 
letter. The letters of the second section are then inscribed, this being 
shown in Figure 24c. In Figure 24d and e, the results of inscribing the 
third and fourth sections, respectively, are shown. The letters of the 
cryptogram are then taken out of the completed grid by following any 
prearranged route of transcription. The cryptogram below has been 
transcribed by following down the col umns in succession from left 
to right. 

d. To decryptograph such a message, the cipher letters are inscribed 
columnwise in a grid 10 by 10 (i. e., one composed of 100 cells, 10 per 
side) and then the grille applied to the square in four consecutive 
positions corresponding to those used in cryptographing. The letters 
disclosed by each placement of the grille are written down as they 
appear, section after section. 

e. The second manner of employing a revolving grille is merely the 
reciprocal of the first. The procedure followed in the first method to 
decryptograph a message is followed in the second method to crypto- 
graph a message; and the procedure followed in the first method to 
cryptograph is followed in the second method to decryptograph. 

18. Grilles of other geometric forms. — Grilles are not limited to 
square-shaped figures. They may be equilateral triangles, pentagons, 
hexagons, and so on. Any figure which can be pivoted upon a central 
point and which when revolved upon this pivot can be placed in a 
succession of homologous positions over a grid corresponding to the 
grille will serve equally well. A triangle affords three grille positions, 
a pentagon, five, and so on. 

19. Polyphase transposition, by grilles. — One grille may be 
employed to inscribe the letters of the message on the grid, and a 
second, and different, grille employed to transcribe them from the 
grid to form the final text of the cryptogram. This would constitute a 
real double transposition method of great complexity. Polyphase 
transposition by a series of grilles is of course possible. 

20. Increasing the security of revolving grilles. — a. The total 
number of letters which a grille will exactly encipher is termed its 
capacity. If the number of letters of a message is always equal tc 
the total capacity of the grille, this information is of great aid in 
solution by the enemy. For example, a message of 64 letters indi- 
cates a grille 8 by 8 with 16 apertures; one of 144 letters, a grille 12 
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by 12 with 36 apertures, and so on. There are, however, methods of 
employing a grille so that it will serve to encipher messages the 
lengths of which are greater or less than the capacity of the grille. 

b. When the total number of letters is less than the capacity of 
the grille, no modification in method of use is necessary. Encipher- 
ment of such a message comes to a close when the last plain-text 
- letter has been inscribed. In decryptographing such a message,, the 
recipient must strike out, on the grid upon which he is to inscribe 
the cipher text, a number of cells corresponding to the difference 
between the number of letters of the text as received and the total 
capacity of the grille. The location of the cells to be thus eliminated 
must be prearranged, and it is best usually to strike them off from 
the final positions of the grid. 
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FIOUBE 25. 

c. When the total number of letters is equal to or greater than the 
capacity of the grille, a grid of greater capacity than that of the grille 
can be prepared, on which the grille may be positioned several times, 
thus forming a large or composite grid composed by the juxtaposition 
of the several small grids. If there are a few cells in excess of the 
actual number required, these may be struck off from the large grid 
at prearranged points, for example, from the last column and row, 
as shown in Figure 25b. The grille is then placed in its first position 
in turn on each of the component grids, then in its second position, 
and so on. An example will serve to illustrate. A message of fifty- 
two letters is to be enciphered with the grille shown in Figure 25a, 
the capacity of which is sixteen letters. The number of letters of the 
message being greater than three times sixteen, the composite grid 
must be composed of four small grids containing a total of sixty-four 
cells. Therefore, twelve of these cells must be eliminated. These 
are shown in Figure 25b, together with the number indicating the 
positions occupied by the letters of the text. 

119555° — 35 3 
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SI. Construction, of revolving grilles. — a. There are several! 
ways of preparing revolving grilles, of which the one described below | 
is the most simple. All methods make use of cross-section paper. 1 

b. Suppose a revolving grille with a capacity of 100 letters is to be ! 

constructed. The cells of a sheet of cross-section paper 10 by 10 are j 
numbered consecutively in bands from the outside to the center, in 
the manner shown in figure 26a. It will be noted that in each band, 
if n is the number of cells forming one side of the band, the highest 
number assigned to the cells in each band is n- 1. ' 

c. It will be noted that in each band there is a quadruplication of ! 
each digit; the figure 1 appears four times, the figure 2 appears four ! 
times, and so on. From each receding band there is to be cut out j 
( 71 —I) cells: from the outermost band, therefore, nine cells are to be j 
cut out; from the next band, seven; from the next, five; from the ; 
next, three; and from the last, one cell. In determining specifically 
what cells are to be cut out in each band, the only rules to be observed 
are these: (1) One and only one cell bearing the figure 1 is to be cut 
out, one and only one cell bearing the figure 2 is to be cut out, and 
so on; (2) as random a selection as possible is to be made among the 
cells available for selection for perforation. In Figure 26b is shown 
a sample grille prepared in this way. 

d. If the side of the grille is composed of an odd number of cells, 
the innermost band will consist of but one cell. In such case this 
central cell must not be perforated. 

e. It is obvious that millions of differently perforated grilles may 
be constructed. Grilles of fixed external dimensions may be desig- 
nated by indicators, as was done by the German Army in 1915 when 
this system was employed. For example, the FRITZ grille might 
indicate a 10 by 10 grille, serving to encipher messages of about 100 
letters; the ALBERT grille might indicate a 12 by 12 grille, serving 
to encipher messages of about 144 letters, and so on. Thus, with a 
set of grilles of various dimensions, all constructed by a central 
headquarters and distributed to lower units, systematic use of grilles 
for messages of varying lengths can be afforded. 

/. A system for designating the positions of the perforated cells of 
^ grille may be established between correspondents, so that the 
necessity for physical transmission of grilles for intercommunication 
is eliminated. An example of a possible system is that which is based 
upon the coordinate method of indicating the perforations. The 
columns from left to right and the rows from bottom to top are 
designated by the letters A, B, C, . . . Thus, the grille shown in 
Figure 26b would have the following formula: 

ADG; BBEH; CDJ; DEG; EACH; FFI; GE; HBDHJ; IDG; 

JABFI. 
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g. Given the formula, the eight comers of the grille can be labeled 
in various ways by prearrangement; but the simplest method is 
that shown in connection with Figure 26b. Then the initial position 
of the grille can be indicated by the number which appears at the 
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Figukk 26 . 

upper left-hand comer when the grille is placed on the grid, ready for 
use. Thus, position 1 indicates that the grille is in position with the 
figure 1 at the upper left-hand corner; position 3, with the figure 3 
at the upper left-hand comer, etc. 



\ 




! .1' 
ii 







REF ID:A64690 



32 

h. The direction of revolving the grille can be clockwise or counter- 
clockwise, so that correspondents must make arrangements before- 
hand as to which direction is to be followed. 

i. Revolving grilles can be constructed so that they have two 
operating faces, an obverse and a reverse face. They may be termed 
revolving-reversible grilles. The principles of their construction merely 
involve a modification of those described in connection with ordinary 
revolving grilles. A revolving-reversible grille will have eight possible 
placement indicators; usually positions 1 and 5, 2 and 6, etc., cor- 
respond in this obverse-reverse relationship, as shown in Figure 20. 

j. The principles of construction described above apply also to 
grilles of other shapes, such as triangles, pentagons, etc. 

22. Nonperforated grilles. — a. All the effects of a grille with 
actual perforations may be obtained by the modified use of a nonper- 
forated grille. Let the cells that would normally be cut out in a grille 
be indicated merely by crosses thereon, and then on a sheet of cross- 
section paper let the distribution of letters resulting from each place- 
ment of the grille on a grid be indicated by inserting crosses in the 
appropriate cells, as shown in Figure 27. 

Grille Grille Position 

X 
2 

3 

4 

Figube 27a. 

b. Note should be made of the fact that in Figure 27b the distribu- 
tion of crosses shown in the third row of cells is the reverse of that 
shown in the first; the distribution shown in the fourth row is the 
reverse of that shown in the second. This rule is applicable to all 
revolving grilles and is of importance in solution. 

c. If the letters of the text are now inscribed (normal manner of 
writing) in the cells not eliminated by crosses, and the letters trans- 
scribed from columns to form the cryptogram, the results are the same 
as though a perforated grille had been employed. Thus: 
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Cryptogram: 

. EWCRA EOLDA RDDAT Y 

Figube 27c . 
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Figube 27b. 
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d. It is obvious that a numerical key may be applied to effect a 
columnar transposition in the foregoing method, giving additional 
security. 

e. The method is applicable to grilles of other shapes, such as tri- 
angles, pentagons, hexagons, octagons, etc. 

j. In Figure 27c it is noted that there are many cells that might be 
occupied by letters but are not. It is obvious that these may be filled 
with n ull s so that the grid is completely filled with letters. Long 



Figure 28 . 



messages may be enciphered by the superposition of several diagrams 
of the same dimensions as Figure 27c. 

23. Rectangular or “postcard” grilles. — a. The grille shown in 
Figure 28 differs from the ordinary revolving grille in that (1) the 
apertures are rectangular in shape, and are greater in width, thus 
permitting of inscribing several letters in the cells disclosed on the 
grid by each perforation of the grille ; and (2) the grille itself admits 
of but two positions with its obverse side up and two with its reverse 
side up. In Figure 28 the apertures are numbered in succession from 
top to bottom in four series, each applying to one position of the 
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grille; the numbers in parentheses apply to the apertures when the 
grille is reversed ; the numbers at the comers apply to the four posi- 
tions in which the grille may be placed upon the grid. 

b. One of the ways in which such a grille may be used is to write 
the first letter of the text at the extreme left of the cell disclosed by 
aperture 1, the second letter, at the extreme left of the cell disclosed 
by aperture 2, and so on. The grille is retained in the same position 
and the 17th letter is written immediately to the right of the 1st, 
the 18th immediately to the right of the 2d, and so on. Depending 
upon the width of the aperture, and thus of the cells disclosed on the 
grid, 2, 3, 4 . . . letters may be inserted in these cells. When all the 
cells have been filled, the grille may then be placed in the second 
position, then the third, and finally, the fourth. 

c. Another way in which the grille may be used is to change the 
position of the grille after the 16th letter has been inserted, then 
after the 32d, 48th and 64th; the 65th letter is then inserted to the 
right of the 1st, the 81st, to the right of the 17th, and so on until the 
grid is completed. 

d. Whole words may, of course, be inserted in the cells disclosed by 
the apertures, instead of individual letters, but the security of the 
latter method is much lower than that of the former. 

e. The text of the grid may be transcribed (to form the cryptogram) 
by following any prearranged route. 

j. The successive positions of a post card grille may be prearranged. 
The order 1, 2, 3, 4 is but one of 24 different sequences in which it may 
be superimposed upon the grid. 

8 4. O o Botrueti o n e» lipaM r ca r d” g r illo H i 

o, A modification of the principles set forth in paragraph 21, dealing 
-S with the construction of revolving grilles, is applied in the construc- 
tion of rectangular or “post card ” grilles. Note the manner in which 
the cells in Figure 29a are assigned numbers; homologous cells in each 
band receive the same number. In Figure ?9a there are three bands, 
numbered from 1 to 8, 9 to 16, and 17 to 24. Then in each band one 
and only one cell of the same numbered set of four cells is cut out. 
For example, if cell la is selected for perforation from band 1 (as 
indicated by the check mark in that cell), then a cross is written in 
the other three homologous cells, lb, c, and d, to indicate that they 
are not available for selection for perforation. Then a cell bearing 
the number 2 in band 1 is selected, for example, 2c, and at once 2a, 
b, and d are crossed off as being ineligible for selection, and so on. 

In Figure 29c is shown a grille as finally prepared, the nonshaded cells 
representing apertures. 



35 



REF ID:A64690 



b. The grille, Figure 29c, is a “six-column” one, that is, the cells foritt 
six col umn s. It is obvious that grilles with any even number of 
columns of cells are possible. The number of apertures in each band 
should be equal and this number multiplied by the number of bands 
and then by 4 should equal the capacity of the grille. In the case of 
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the one shown in Figure 29c the capacity is 8 by 3 by 4 or 96 cells; 
this is the same as is obtained merely by multiplying the height (in 
cells) by the number of columns, 16X6=96. If four letters are 
inscribed in each rectangle, the capacity of the grille in terms of 
letters is 384. The grid in this case would, after completion, present 
24 columns of letters, to which a numerical key for a second trans- 
position can be applied in transcription to produce the final text of 
the cryptogram. 

14; <Vu3JUa ' • - 
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Section VI 

MISCELLANEOUS TRANSPOSITION SYSTEMS 

Paragraph 

Complex route transposition , 25 

Transposition of groups of letters, syllables, and words 26 

Disguised transposition methods 27 

Cipher machines for effecting transposition 28 



25. Complex route transposition. — a. In Figure 36 a route for 
inscribing letters within a rectangle is indicated by a sequence of 
numbers. The initial point may be at any of the four comers of the 
rectangle, or it may be at any other point, as prearranged. The 
letters may be inscribed to form the rectangle by following the route 
indicated and then transcribed from the rectangle to form the crypto- 
gram by following another route; or the letters may be inscribed 
according to one route and transcribed accordingly to the numerical 
route indicated. 
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b. A variation of the foregoing is that illustrated in Figure 31, 
wherein the inscription follows the route shown by the arrows. The 
initial point of inscription is indicated by the figure 1, and the final 
point, by the figure 2. 

c. In the foregoing case, the route is a succession of the moves 
made by the king in the game of chess; it forms the so-called “king's 
tour”, in which the playing piece makes a complete or reentrant 
journey covering all cells of the chessboard, each cell being traversed 
only once. A route composed of a succession of moves made by the 
knight, or the so-called “knight’s tour”, is also possible, but in order 
to be practical a grid with the cells numbered in succession would have 
to be prepared for the correspondents, since millions of different re- 
entrant knight 's tours can be constructed 1 on a chessboard of the 
usual 64 cells. 

26. Transposition of groups of letters, syllables, and words. — - 

There is nothing in the previously described methods which precludes 
the possibility of their application to pairs of letters, sets of three or 

1 See Ball, W. W. R., Mathematical Recreations and Essays, London, 1928. 
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more letters, or even syllables and whole words. Nor, of course, is 
their use limited to operations with plain text; they, may be applied 
as secondary steps after a substitutive process has been completed 
(see Sec. X). 

27. Disguised transposition methods. — a. The system often 
encountered in romances and mystery stories, wherein the message 
to be conveyed is inserted in a series of nonsignificant words con- 
structed with the purpose of avoiding or evading suspicion, is a species 
of this form of “open” cryptogram involving transposition. The 
“open” or enveloping, apparently innocent text may be designated 
as the external text; the secret or cryptographic text may be designated 
as the internal text. A complicated example of external or open and 
internal or secret text is that shown in paragraph 16. 

b. little need be said of the method based upon constructing exter- 
nal text the letters of which, at prearranged positions or intervals, 
spell out the internal text. For example, it may be prearranged that 
every fourth letter of the external text forms the series of letters for 
spelling out the internal text, so that only the 4th, 8th, 12th ... 
letters of the external text are significant. The same rule may apply 
to the complete words of the external text, the n, 2 n, 3 n, . . . words 
form the internal text. The preparation of the external text in a 
suitable form to escape suspicion is not so easy os might be imagined, 
when efficient, experienced, and vigilant censorship is at work. Often 

the paragraph or passage containing the secret text is sandwiched in ] 

between other paragraphs added to pad the letter as a whole with text fi 

suitable to form introductory and closing matter to help allay sus- 
picion as to the presence of secret, hidden text. | 

c. A modification of the foregoing method is that in which the 1st, 

3d, 5th, . . . words of a secret message are transmitted at one time 
or by one agency of communication, and the 2d, 4th, 6th, . . . words 
of the message are transmitted at another time or by another agency 
of communication. Numerous variations of this scheme will suggest 
themselves, but they are not to be considered seriously as practical | 

methods of secret intercommunication. j 

d. Two correspondents may agree upon a specific size of paper and 

a special diagram drawn upon this sheet, the lines of which pass 
through the words or letters of the internal text as they appear in the ex- i 

temal text. For example, the legs of an equilateral triangle drawn upon j 

the sheet of paper can serve for this purpose. This method is practi- 
cable only when messages can be physically conveyed by messenger, by j 

the postal service, or by telephotographic means. Many variations 

of this basic scheme may perhaps be encountered in censorship work. 

28. Cipher machines for effecting transposition. — These may 
be dismissed with the brief statement that if any exist today they are 
practically unknown. A few words are devoted to the subject under 
paragraph 71 
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B. SUBSTITUTION 8YSTEMB 

Section VII 

POLYGRAPHIC SYSTEMS 



Paragraph 

Preliminary remarks 29 

Monographic and polygraphic substitution 30 

Polygraphic substitution by means of tables 31 



29. Preliminary remarks. — a. It is assumed that the student has 
absorbed the information contained in Sections VII to XIII, inclusive, 
Special Text No. 165, Elementary Military Cryptography. The 
sections deal with the various types of cipher alphabets, simple monoal- 
phabetic substitution, monoalphabetic substitution with variants, the 
more simple varieties of polyalphabetic substitution, cipher disks, and 
cipher tables. The present study of substitution is a continuation of 
the former, a thorough understanding of which is a requisite to the ex- 
amination of the more complex types of substitution now to be set forth. 

b. Before entering upon the study referred to, it will be advisable 
to explain several terms which will be used. Substitution methods 
in general may be described as being monoliteral or polyliteral in char- 
acter. In the former there is a strict letter-for-letter replacement, or, 
to include numerical and symbol methods, there is a “one-to-one” 
correspondence between the length of the units of the plain text and 
those of the cipher text, no matter whether the substitution is mono- 
alphabetic or polyalphabetic in character. In polyliteral methods, 
however, this “one-to-one” correspondence no longer holds. A 
combination of two letters, or of two figures, or of a letter and a figure, 
may represent a single letter of the plain text; there is here a “two-to- 
one” correspondence, two characters of the cipher text representing 
one of the plain text. The methods described under Section X, Special 
Text No. 165, fall under the latter designation; the cipher equivalents 
there shown are, properly speaking, bipartite in character. Tripartite 
cipher equivalents are also encountered. Polyliteral methods, there- 
fore, are said to employ polypartite alphabets, of which the bipartite 
type is by far the most common. Further on in this text, polyliteral 
methods of greater complexity than those illustrated in Section X, 
Special Text No. 165, will be discussed. Attention now will be directed 
more particularly to a different type of substitution designated as 
monographic and polygraphic substitution. 

30. Monographic and polygraphic substitution. — a. All the 
methods of substitution heretofore ' described are monographic in 
nature, that is, in the enciphering process the individual units sub- 
jected to treatment are single letters; there is a letter-for-letter sub- 
stitution, or, to include numerical and symbol methods, there is, as 
in the case of monoliteral substitution, a “one-to-one ” correspondence 
between units of the plain text and those of the cipher text. In poly- 
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graphic substitution, however, combinations of letters of the plain 
text, considered as indivisible compounds, constitute the units for 
treatment in encipherment. If the units consist of pairs of plain-text 
letters, the encipherment is pair-for-pair, and is said to be digraphic 
in character; if the units consist of sets of three letters, it is trigraphic 
in character, and so on. There is still a “one-to-one ” correspondence 
involved, but the units in these cases are composite in character and 
the individual elements composing the units affect the cipher equiva- 
lents jointly, rather than separately. The basic important factor in 
true polygraphic substitution is that aU the letters of the group partici- 
pate in the determination of the cipher equivalent of the group; the 
identity of each letter of the plain-text group affects the composition 
of the whole cipher group. Thus, in a certain digraphic system AB P 
may be enciphered as XP„ and AC P , on the other hand, may be en- 
ciphered as NK„ ; a difference in the identity of but one of the letters 
of the plain-text pair here produces a difference in the identity of both 
letters of the cipher pair. 

b. For practical usage polygraphic substitution is limi ted to the 
handling of digraphs and trigraphs, although very occasionally groups 
of more than three letters may be employed for special purposes. 

c. The fundamental purpose of polygraphic substitution is the sup- 
pression or rather the elimination of the frequency characteristics of 
ordinary plain text. It is these frequency characteristics which lead, 
sooner or later, to the solution of practically all substitution ciphers. 

When the substitution involves only individual letters in a mono- 
alphabetic system, the cryptogram can be solved very quickly; when 
it involves individual letters in a polyalphabetic system, the crypto- 
gram can usually be solved, but only after a much longer time and 
much more study, depending upon the complexity of the method. 

The basic principle in the solution, however, is to reduce the poly- 
alphabetic text to the terms of monoalphabetic ciphers and then to 
solve the latter. In true polygraphic substitution on the other hand, 
the solution does not rest upon the latter basis at all because it is not 
a question of breaking up a complex text into simpler elements; it 
rests, as a rule, upon the possibility of analysis on the basis of the fre- 
quency of the polygraphic units concerned. If the substitution is 
digraphic, then the units are pairs of letters and the normal fre- 
quencies of plain-text pairs become of first consideration; if the sub- 
stitution is trigraphic, the units are sets of three letters and the normal 
frequencies of plain-text trigraphs are involved. In the last two cases 
the data that can be employed in the solution are meager, and are 
far from definite or unvarying in their significance, and that is why 
solution of polygraphic substitution ciphers is often extremely difficult. 

d. Just as in typography, when certain combinations of letters, such 
as fi, fl, and ffi, are mounted on one and the same piece of type, they 
are called logotypes or ligatures, so in cryptography, when combina- 
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tions of two or more letters are to be treated as a unit in a crypto- 
graphic process, they may also be called ligatures and can be conven- 
iently indicated as being so by placing a bar across the top of the 
combination. Thus, CO p represents the digraph CO of the plain text. 
It will also be convenient to use the Greek letter 0 to representaletter of 
the alphabet, without indicating its identity. Thus, instead of the cir- 
cumlocution “ any letter of the plain text ”, the symbol 0 P will be used ; 
and for the expression “any letter of the cipher text”, the symbol 0 C 
will be used. The symbol 00 p then means “any plain-text digraph”; 
the symbol 0d o , “any cipher-text digraph.” To refer specifically to the 
1st, 2d, 3d . . . mem ber of a ligature, the exponent 1, 2, 3 . . . will 
be used. Thus, 0% of REM P is the letter E; 0 3 c of XRZ 0 is Z. 

31. Polygraphic substitution by means of tables.— a. The 
most simple method of effecting polygraphic substitution involves the 
use of tables similar to that shown in Table 1. This table merely 
presents equivalents for digraphs and is to be employed upon the 
coordinate system, 0*„ of 0*0 2 p being sought in the column at the left or 
right, 0% in the row at the top or bottom. The cipher pair, OWc, is then 
found at the in terse ction of the row and column thus indicated. For 
example, AF„=YG 0 ; FH P =AZ„ etc. 

Table 1 

(Showing only a partially filled table) 

Final Letter (#*„) 




ABCDEFGHXJK X 7 Z 
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b. Th e foregoing table is reciprocal in nature; that is, AF„=YG 0 

and YG P =AF C . Thus, a single table serves for enciphering as well as j 

for deciphering. The word DEFEND would be enciphered as YA NZ 
CY, and then grouped in fives: YANZO Y . . . . When a final single I 

letter occurs, a null is added in order to make a pair of letters capable 
of being enciphered by the method. Reciprocity is, however, not an 
essential factor and for greater security nonreciprocal tables are more j 

advisable. In such cases an enciphering table must have its comple- 
mentary deciphering table. 

c. Until the amount of text enciphered by means of such a table 

becomes great enough to disclose the cipher equivalents of the most f 

frequently used digraphs, such as EN, ER, RE, TH, ON, etc., crypto- , 

grams based upon the table are relatively secure against solution. j 

d. A simple method for preventing the establishment of the fre- 
quencies characterizing these commonly used digraphs and thus elim- 

mating the principal basis for their identification is given in paragraph ji 

62e. I, 

e. The factor that contributes most to the relatively high degree I 

of security of the digraphic method described in a and b above is the 

absence of symmetry in the table employed; for this table is con- 

structed by random assignment of values and shows no symmetry 

whatsoever in its arrangement of contents. Hence, even if 0^ in a [ 

first case of 0 i 0 5 p =0 I 0 3 c is identical with B' 0 in a second case, in the 

first case is wholly different from in the second case. For example, i 

Table 1 shows that AD v =^E c and AD p ~ 77 c ; the cipher resultants 

fail to give any hint that the plain-text pairs contain an identical letter. < 

j. If, however, the latter is not the case and the table exhibits j 

symmetry in its arrangement of contents, solution is somewhat 
facilitated. Note the following Table 2, for example, in which two 
mixed sequences are employed to form the cipher equivalents. One 
mixed sequence is based upon the keyphrase WESTINGHOUSE 
AIR BRAKE; the other, upon the keyphrase GENERAL ELEC- 
TRIC COMPANY. The word FIRE would be enciphered as KIQA. 
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g. A cursory examination of Table 2 shows that when 0* p is iden- 
tical in two cases then 0 2 c is identical in these cases, so that in reality 
the encipherment is by no means truly digraphic in character. 
Described in cryptographic terms, the encipherment of 0* p is poly- 
alphabetic in character whereas that of 0^ is monoalphabetic. A more 
obvious picture of this condition is brought out in the following rear- 
rangement of Table 2. 
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h. By a slight modification in arrangement but with no change in 
basic principle, the encipherment can be made monoalphabetic so 
far as 0' p is concerned, and polyalphabetic so far as 0 2 p is concerned. 
Note Table 4. 
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Table 4 



ABCDEFGHIJKLMNOPQRSTUVWXYZ 



GEN 
E N R 
N R A 
R A L 
A L C 
L C T 
C T I 
T I 0 
I 0 M 
0 M P 
M P Y 
P Y B 

Y B D 
B D F 
D F H 
F H J 
H J K 
J K Q 
K Q S 
Q S U 
SUV 
U V W 

V W X 
ff X Z 
X Z G 
Z G E 



R A L C 
A L C T 
L C T I 



T I 0 M 
I 0 M P 
0 M P Y 
M P Y B 
P Y B D 

Y B D F 
B D F H 
D F H J 
F H J K 
H J K Q 
J K Q S 
K Q S U 
Q S U V 
S U V W 

uvn 

V W X z 
W X Z G 
X Z G E 
Z G E N 
G E N R 
E N R A 
N R A L 



I 0 M 
0 M P 
M P Y 
P Y B 

Y B D 
B D F 
D F H 
F H J 
H J K 
JKQ 
KQS 
Q S U 
SUV 
U V W 

V W X 
W X z 
X Z G 
Z G E 
GEN 
E N R 
N R A 
R A L 
A L C 
L C T 
C T I 



M P Y B 
P Y B D 

Y B D F 
B D F H 
D F H J 
F H J K 
HJXQ 
J K Q S 
K Q S U 
Q S U V 
SUV* 
U V W X 

V W X z 
W X Z G 
X Z G E 
Z G E N 
G E N R 
E N R A 
N R A L 
R A L C 
A L C T 
LCTI 
C T I 0 
TIOli 

i our 

0 M P Y 



D F H J 
F H J K 
H J K Q 
J K Q S 
K Q S U 
Q S U V 
S U V W 
U V W X 

V W X Z 
W X Z G 
X Z G E 
Z G E N 
G E N R 
E N R A 
N R A L 
R A L C 
A L C T 
LCTI 
C T I 0 
T I 0 M 
I 0 M P 
OKPY 
1IPYB 
P Y B D 

Y B D F 
B D F H 



KQS 
Q S U 
SUV 
U V W 

V W X 
W X Z 
X Z G 
Z G E 
GEN 
E N R 
N R A 
R A L 
A L C 
L C T 
C T I 
T I 0 
I 0 M 
0 M P 
U P Y 
P Y B 

Y B D 
B D F 
D F H 
F H J 
H J K 
JKQ 



U V W X Z 

V W X Z G 
W X Z G E 
X Z G E N 
Z G E N R 
G E N R A 
E N R A L 
N R A L C 
R A L C T 
A L C T I 
L C T I 0 
C T I 0 M 
T I 0 M P 
I 0 M P Y 
0 M P Y B 
M P Y B D 
P Y B D F 

Y B D F H 
B D F H J 
D F H J K 
F H J K Q 
H J K Q S 
J K Q S U 
K Q S U V 
Q S U V W 
S U V W X 




i. The results given by Table 3 or Table 4 may be duplicated by 
using sliding alphabets, as shown in Figures 32 and 33. In the former, 
which corresponds to Table 3, Alphabets I and IV are fixed, II and III 
are mounted upon the same strip, which is movable. To use these 
alphabets in encipherment, 0 1 p of ffW . p is located on Alphabet II and 
Alphabets II— III are shifted so that 0* p is beneath A on Alphabet I; 
0 a p is now sought in Alphabet I and 0 * 0*0 will be found under it on 
Alphabets III and IV, respectively. Thus, for the word FIRE the 
successive positions of the alphabet strips are as shown below, yielding 
the cipher resultant EIQA. 

I — ABCDEFGHIJKLMNOPQRSTUVWXYZ . Fixed alphabet 

Try II— FGHIJKLMNOPQRSTUVWXYZABCDEl ,, . . .... 

FI* K1 ° III — NGHOUARBKCDF JLMPQVXYZWESTI J -- Movable alphabet 

IV— GENRALCTIOMPYBDFHJKQSUVWXZ Fixed alphabet 






I— ABCDEFGHIJKLMNOPQRSTUVWXYZ- - Fixed alphabet 

II— RSTUVWXYZABCDEFGHIJKLMNOPQl . . , . , . 

III — JLMPQVXYZWESTINGHOUARBKCDFj -Movable alphabet 

IV— GENRALCTIOMPYBDFHJKQSUVWXZ - —Fixed alphabet 

Fiqvu 32. 
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j. To correspond with Table 4 the alphabet strips are arranged as 
shown in Figure 33. Here Alphabets I and II are fixed. III and IV 
are mounted upon the same movable strip. To use these alphabets 
in encipherment, 6\ of 0 l 6 2 v is located on Alphabet IV and Alphabets 
III— IV are shifted so that 8 2 p (I„) is beneath A on Alphabet I; fl l n (F p ) 
is now sought in Alphabet I and will be found under it on Alpha- 

bets II and III, respectively. Thus, for the word FIRE, the succes- 
sive positions of the alphabet strips are as shown below, yielding the 
cipher resultant NBJU. 



/ y Vj, — V35, 



I — ABCDEFGHIJKLMNOPQRSTUVWXYZ- 

1 1 — WESTINGHOUARBKCDF JLMPQVXYZ . 

III — IOMPYBDFHJKQSUVWXZGENRALCT 1 

IV — IJKLMNOPQRSTUVWXYZABCDEFGHJ 



Fixed alphabet 

Fixed alphabet 

Movable alphabet 



BB D =Jt 7. 



I — ABCDEFGHIJKLMNOPQRSTUVWXYZ Fixed alphabet 

II— WESTINGHOUARBKCDFJLMPQVXYZ Fixed alphabet 

III— ALCTIOMPYBDFHJKQSUVWXZGENRl . . 

I V— EFGHI JKLMNOPQRSTUVWXYZAB CD J T " M 0 vable alphabet 

Fioube 33. 



k. Neither Table 3 nor Table 4 presents the possibilities such tables 
might afford for digraphic substitution. They may, however, be 
rearranged so as to give results that will approach more closely to the 
desired ideal as to nonrelationship between cipher equivalents of 
plain-text pairs having an identical letter in common. Note that in 
Table 5, which is based upon the same primary alphabets as Table 3 
and Table 4, the cipher equivalents are the same as in the latter 
tables, but they have been so distributed as to eliminate the unde- 
sirable and externally obvious relationship referred to. (In any 
table of this nature there can be only 676 different pairs of equiva- 
lents, since the table presents merely the permutations of the 26 
letters taken two at a time. It is the distribution of the pairs which 
is important.) 

l. Table 5 still shows symmetry in its construction, and a suspicion 
of its existence formed during the preliminary stages of cryptanalysis 
would aid materially in hastening final solution. 

m. The foregoing tables have all been digraphic in nature, but a 
kind of false trigraphic substitution may be also accomplished by 
means of such tables, as illustrated in the accompanying Table 6, 
which is the same as Table 5 with the addition of one more alphabet 
at the top of the table. 



119555 35 — 1 
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Tabui 6 



III. a/b 
IV.'RIA 




n. In using this table, 0’ p is located in Alphabet I, and its equivalent, 
6\, taken from Alphabet II; 0* p is located in Alphabet III, and its 
equivalent, taken from Alphabet IV ; is the letter lying at the 
intersection of the row indicated by 0% in Alphabet I and the column 
determined by 0V Thus, FIRE LINES would be enciphered NNZ 
IEQ KOV. It is obvious, however, that only the encipherment of 
0® p is polyalphabetic in character; 0 l p and 0 2 „ are enciphered purely 
monoalphabetically. Various other agreements may be made with 
respect to the alphabets in which the plain-text letter will be sought 
in such a table, but the basic cryptographic principles are the same as 
in the case described. 

o. Digraphic tables employing numerical equivalents instead of 
letter equivalents are, of course, possible but in this case the number 
of equivalents required, 676, means that combinations of three figures 
must be used. 
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Section VIII 

j CHECKERBOARD DIGRAPHIC SUBSTITUTION 

Paragraph 



Disadvantages of large tables 32 

Four-alphabet checkerboards 33 

Two-alphabet checkerboards 34 

One-alphabet checkerboards; Playfair Cipher 35 

Rectangular designs 36 

Combined alphabetical and numerical checkerboard 37 



32. Disadvantages of large tables. — Digraphic substitution by 
means of tables such as those illustrated in Tables 1, 2, and 5 is 
impractical for military use on account of the relatively large size that 
the table takes, and the inconvenience in their production, change, 
distribution, and handling. Just as it has been noted in Section XII, 
Special Text No. 165, Elementary Military Cryptography, that simple 
sliding alphabet strips can replace large quadricular tables, so it 
will be found that small designs similar to a checkerboard can replace 
the large quadricular tables in digraphic substitution. Although the 
usual chess or checkerboard is based on a square 8 by 8, with 64 cells, 
the term checkerboard will here be used to designate any square design 
with n a cells. 

33. Four-alphabet checkerboards.— a. The simple or single- 
alphabet checkerboard consists of a square 5 by 5, containing 25 cells 
in which the letters of a 25-element alphabet (I and J being inter- 
changeable) are inserted in any prearranged order. When four such 
checkerboard alphabets are arranged in a large square as shown in 
Figure 34, the latter may be employed for digraphic substitution to 
yield the same cipherresults as does the much larger Table 1 (par. 31). 
In this square, 0* D of 00 p is sought in section M 2 p, in section 2. Thus, 
0'p and O 2 ^ will always form the northwest-southeast comers of an 
imaginary rectangle delimited by these two letters as located in these 
two sections of the square. Then 0' c and 0 2 o are, respectively, the 
letters at th e no rt heast- so uthw est comers of thi s same rectangle. 
Thus, TOv—TK e ) WD P — TX a ; OR v =PS UR V =WP„ etc. In 
decryptographing, 0* c and 0® o are sought in sections 3 and 4, respectively, 
and their equivalents, 0*p and 0 2 p , noted in sections 1 and 2, respec- 
tively. It may, of course, be prearranged that 0' D should be sought 
in the section now labeled 3, 0 2 p , in that labeled 4, whereupon 8 1 e would 
be located in the section now labeled 1, 0 2 „, in that now labeled 2. 
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Sec. 1 (0‘ p ) 



Sec. 4 (^c) 



Figure 34. 

b. It is possible to construct a digraphic substitution c heck er boar d 
that shows recipro city in its 00 p =6d o relationship so that if AB p =XY e , 
for example, then XY v =AB e . Two conditions are essential to assure 
reciprocity. These are taken into consideration in the establishment 
of the 6 1 6 2 0 , or deciphering sections, and an example will serve to 
explain the process. 

c. Two enciphering alphabets are first constructed; one in section 1 
for 6 l p , the other in section 2 for 0* p , as shown in Figure 35a. The 
alphabet in section 3 is now to be constructed. Any horizontal row 

1 2 3 4 5 



Sec. 3 (0‘c) 
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3 Sec. 2 (fl*p) 

4 



1 2 3 4 5 

Figure 36a. 
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of section 1 is taken, for example, the row labeled 1, c onsisting of the 
letters BWGRM, and these letters are written on any horizont^ row 
of section 3, in any transposed order, which is immediately written 
at the top of section 3, as shown in Figure 35b. 
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Figure 35b. 



Row 1 of section 1 was inserted in row 4 of section 3. The recip- 
rocal permutation of 1 4 is 4 1, and therefore row 4 of section 1 must 
now be inserted in row 1 of section 3, and in the transposed order 
5-2-4-1-3, as indicated at the top of section 3. The result is shown 
in Figure 35c. Then row 2 of section 1 is transferred to another row 
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of section 3, for example, the fifth, and the letters inserted in the 
already indicated transposed order. Immediately thereafter, in order 
to continue the reciprocal permutation relationship, row 5 of section 
1 becomes row 2 of section 3. This leaves row 3 of section 1 to become 
also row 3 of section 3, and to be reciprocal to itself. The result is 
shown in Figure 35d, where section 3 is completely constructed. The 

1234552413 

4 

5 

3 Sec. 3 (0‘ o ) 
1 
2 
1 
2 

3 Sec. 2 (0* p ) 

4 

5 

1 2 3 4 5 

Figure 3Sd. 

foregoing principle of permutation reciprocity applies equally to the 
rows of section 4. Suppose the permutation 3-5-1-4-2 is decided 
upon for the rows of section 4. This means that rows 1 and 3 of 
section 2 become rows 3 and 1 of section 4 ; rows 2 and 5 of section 2 
become 5 and 2 of section 4; row 4 of section 2 becomes row 4 of 
section 4. As regards the transposed order within the rows of section 
4, the following rule applies: The letters forming a complete column 
from the top of section 3 to the bottom of section 2, whatever their 
order, must also form a complete column from the top of section 1 
to the bottom of section 4. For example, the column designated by 
the number 5 of section 3 contains the letters OHKMECOSGT; 
column 5 of section 1 contains five of these letters, MEKOH ; there- 
fore, the completed column must contain the letters, COSGT but 
in the transposed order given by the permutation selected for the 
rows of section 4, viz, 3-5-1-4-2. 

The completed square is then as shown in F igure 35e, and exhibits 
reciprocity throughout. Example: BB P =LW„, and LW P =BB C . 
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1 2 3 4 5 5 2 4 13 
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Figure 36e. 
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d. The total number of reciprocal permutations of five elements is 
26, as follows: 



(2) 


12354 


(7) 14325 


G) 12345 
(12) 21354 


(17) 34125 


(22) 45312 


(3) 


12435 


(8) 14623 


(13) 21435 


(18) 35142 


(23) 52341 


(4) 


12543 


(9) 15342 


(14) 21643 


(19) 42315 


(24) 52431 


(6) 


13245 


(10) 15432 


(15) 32145 


(20) 43215 


(25) 63241 


(6) 13254 


(11) 21345 


(16) 32154 


(21) 42513 


(26) 54321 



Since the row permutations of sections 2 and 4 are independent, the 
total number of different four-alphabet squares as regards row permu- 
tations is 26 2 = 676. Taking into account the column permutations, 
5X4X3X2X1 in number, it is therefore possible to have 676X120 
or 81,120 different, four-alphabet checkerboards of this nature, based 
upon the same two alphabets in sections 1 and 3. With changes in 
the latter, the number, of course, becomes very much greater. 

34.. Two-alphabet checkerboards. — a. It is possible to effect 
digraphic substitution with a checkerboard consisting of but two 
sections by' a modification in the method of finding equivalents. 
In the checkerboard shown in Figure 36, 0' D of is located in the 
square at the left, 0 2 p , in the square at the right. 

When are at the opposite ends of the diagonal of the imaginary 
rectangle defined by the letters, BWc are at the opposite ends of the 
other diagonal of the sa me re ct angl e, just as in t he p re cedin g case. 
For example, AL P =TT„; DO p =GAcl AT P =TA C ; EH p =HEc- 

b. Reciprocity may be imparted to the 2-section checkerboard by 
reciprocal permutation of the rows of the checkerboard, no attempt 
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being made to effect any reciprocal permutation of columns. Figure 
37 shows such a checkerboard. 
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Here, for example, AW p =OT 0 and OT p =AW c ; BA P =DL 0 and 
DL P =BA C , etc. 

c. In 2-alphabet checkerboards in which one section is directly 
above the other, reciprocity already exists without special prepara- 
tions for its production. In Figure 38, MO P =UA 0 and UA p =MO c ; 
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MA p =MA,j and MA„— MA D . When both 0‘ p and 0 2 p happen to be in 
the same column, there is really no encipherment, a fact which con- 
stitutes an important disadvantage of this method. This disadvan- 
tage is only slightly less obvious in the preceding cases where the 
cipher equivalent of such a case of 6 l 9 2 p consists merely of the plain- 
text letters in reversed order, yielding 0 2 0 l c . 

36. One-alphabet checkerboards; Playfair Cipher. — a. By 
reducing the checkerboard to one alphabet, there results the square 
of the well-known Playfair Cipher, used for many years as a field 
cipher in the British Army. For a short time, 1917-18, it was 
prescribed as a field cipher for use in the United States Army. A 
modification in the method of finding cipher equivalents has been 
found useful in imparting a greater degree of security than that 
afforded in the preceding types of checkerboard methods. Figure 39 
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shows a typical Playfair square. The usual method of encipherment 
can be best explained by examples given under four categories: 

(1) Members of the plain-text pair, 0 l p and 0 2 p , are at opposite ends of 
the diagonal of an imaginary rectangle defined by the two letters; the 
members of the cipher-text pair, 0 1 ,, and 0 2 O) are at the opposite ends 
of t he other diagonal of t his imaginary rectangle. Examples: 
MO P =AL 0 ; MI p =UC c ; LU P =QM C ; VI p =YC c . 

(2) 0 J P and 0 s p are in the same row; the letter immediately to the 
right of 0‘ p forms 0‘ c , the letter immediately to the right of 0 2 p forms 
0V When either 0* p or 0 2 p is at the extreme right of the r ow, the first 
letter in th e row be com es its 0 O . Examples: MA P = AN C ; MU P = AF C ; 
AF P =NM 0 ; FA P =MN C . 

(3) 0‘p and 0 2 p are in the same column; the letter immediately below 
6 l p forms 0‘c the letter immediately below 0 2 p forms 0 * 0 . When either 
0‘p or 0 2 p is at the bottom of th e co lumn, the top letter in that column 
becomes its 0 O . Examples: MC p =CB c ; AW P =TA C ; WA P =AT„; 
QU P =YI 0 . 
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(4) 6 l p and 0^ are identical; they are to be separated by inserting a 
null, usually the letter X or Q. For example, the word BATTLES 
would be enciphered thus: 

BA TX TL ES 
DM Rff CO KP 

b. The Playfair square is automatically reciprocal so far as encipher- 
ments of type (1) above are concerned; but this is not true of encipher- 
ments of type (2) or (3). 

36. Rectangular designs. — a. It is not essential that checker- 
boards for digraphic substitution be in the shape of perfect squares; 
rectangular designs will serve equally well, with little or no modifica- 
tion in procedure. In four-alphabet and two-alphabet rectangles 
reciprocity can be produced by following the method indicated in 
paragraph 33. 

b. In Figures 40 and 41 are shown two examples of such rectangles, 
together with illustrations of encipherments. Since the English 
alphabet consists of 26 letters, a number which can only form an 
impracticable rectangle 2 by 13, and since the addition of any symbols 
such as the digits 1, 2, 3 ... to augment the number of elements to 27, 
28, 30, 32, 35, or 36 characters would result in producing cryptograms 
containing intermixtures of letters and figures, the only practicable 
scheme is to reduce the alphabet to 24 letters as shown in the figures, 
where I serves also for J and U also for V. 
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Figure 40. 

Examples: 

Plain: TH ER EA RE BE TT ER CR YP TO GR AM 

Cipher: YX BE BK CR ER LX BE RE HC ZX RH IB 
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Figure 41. 

Examples: 

Plain: TH ER EA RE BE TT ER CR YP TO GR AM 

Cipher: BS ME MS PR TM FQ ME HN DN BQ XE WE 

c. Two-alphabet rectangles are also possible; it is thought unneces- 
sary to demonstrate them by specific examples. The general exam- 
ples shown in b above are considered sufficient. 

d. It is possible, however, and it may be practicable to extend the 
alphabet to 28, 30, or more characters by the subterfuge now to be 
explained. Suppose one of the letters of the alphabet is omitted from 
the set of 26 letters, and suppose it is replaced by 2, 3, or more pairs of 
letters, each pair having as one of its members the omitted single 
letter. Thus, in the case of a one-alphabet Playfair design of rec- 
tangular shape, in which the letter K is omitted as a single letter, and 
the number of characters in the rectangle is made a total of 30 by the 
addition of five combinations of K with other letters, the rectangle 
shown in Figure 42 may be constructed. An interesting consequence 
of this modification is that certain irregularities are introduced in the 
cryp togram, consisting in (1) the occasional replacement of 6 1 9 t D by 
«W' t , that is , of a dig raph b y a trigraph, (2) less frequently, the re- 
placement of 0W P by 0W0V„ that is, of a trigraph by a tetr agrap h, 
and (3) the appearance of variant values. For example, AM n = 
HKU 0 ;GLp=OKO c ; JKp=KAKE c ;CK p =BKE e , or DKE c ,orGP 0 ,or 
TP 0 . So far as the decryptographing is concerned, there would be no 
difficulty, because the operator always considers any K occurring in 

r 
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the cipher text as invariably forming a ligature with the succeeding 
letter, taking the pair of letters as a unit . In decryptographing a set 
of letters, such as GP C , he obtains CKO p ; he disregards the O. 

e. As a final note it may be added that it is, of course, possible to 
insert the letters within a checkerboard or a rectangle in a less sys- 
tematic order than that indicated in the various examples. The 
letters may be inserted at random or by follomng the principles oj sys- 
tematically-mixed alphabets , so that no definite sequence is apparent in 
the checkerboard or rectangle. 

37. Combined alphabetical and numerical checkerboard. — a. 
In Figure 43 is shown a 4-section checkerboard which presents a 
rather interesting feature in that it makes possible the substitution of 
3-figure combinations for digraphs in a unique manner. To encipher 
a message one proceeds as usual to find the numerical equivalents of a 
pair, and then these numbers are added together. Thus: 

Plain text: PR OC EE DI NG 

275 350 100 075 325 
9 13 24 18 7 

Cipher text: 284 363 124 093 332 
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6. To decipher such a cryptogram, take the greatest multiple of 
25 contained in the group of three digits; t.hia multiple and its re- 
mainder form the elements for determining the plain-text pair in the 
usual manner. Thus, 284=275+9=PR. 

Section IX 

COMPLEX SUBSTITUTION SYSTEM3 

Paragraph 



Preliminary remarks 38 

Continuous or nonrepeating-key systems 39 

Auto-key systems : 40 

Progressive-alphabet systems 41 

Interrupted or variable-key systems 42 

Suppressing periodicity by encipherment of variable-length groupings of 

the plain text 43 

Suppressing periodicity by encipherment by variable-length groupings of 

the key 44 

Mechanical cryptographs in which periodicity is avoided 45 



38. Preliminary remarks. — In paragraph 63, Special Text No. 
165, brief reference was made to more complex substitution systems. 
It was stated that there are certain polyalphabetic methods in which 
periodicity is absent; there are other methods in which the external 
manifestation of periodicity in cryptograms is prevented, or in which 
it is suppressed or disguised. Slight hints were then given as to the 
nature of some of these methods. This and the next two sections of 
the present text are devoted to a more detailed description and dis- 
cussion of the methods indicated, which, as a class, may be designated 
as aperiodic systems, as contrasted with the previously described, more 
simple, periodic systems. 

39. Continuous or nonrepeating-key systems. — a. One of the 
simplest methods of avoiding periodicity occasioned by the employ- 
ment of more than one substitution alphabet is to use as the key for 
the encipherment of one or more messages a series of letters or char- 
acters that does not repeat itself. The running text of a book, 
identical copies of which are in possession of the correspondents, may 
serve as the key for this purpose. It is only necessary for the cor- 
respondents to agree as to the starting point of the key, or to arrange 
a system of indicating this starting point in the text of the crypto- 
gram. Such a system is called a continuous-key system. Other 
names applied to it are nonrepeating, running, or indefinite-key systems. 
Telephone directories, the Bible, standard reference works, etc., are 
often used as source books for such keys. 

b. Various types of cipher alphabets may be employed in this 
system, direct or reversed standard alphabets, mixed alphabets drawn 
up at random, or secondary mixed alphabets resulting from the inter- 
action of two primary sliding mixed components. 
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c. As an example of the method of cryptographing, suppose the 
following message is to be enciphered on the continuous key prin- 
ciple, using as the key the text of this subparagraph, beginning AS 
AN EXAMPLE . . . , and reversed standard alphabets: 

HEAVY INTERDICTION FIRE FALLING AT ... . 

Key text: ASANE XAMPL EOFTH EMETH 0D0FC RYPTO . . . 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT . . . 

Cryptogram: TOASG • PNTLU BGDAZ QZZLQ KYOUR JLJTV . . . 

40. Auto-key systems. — a. The cipher letters of a cryptogram 
may serve as keyletters, thus automatically furnishing a key. Sup- 
pose, for example, that two correspondents agree to use the word 
TRUE as an initial key, and suppose the message to be enciphered 
(with the obsolete U. S. Army cipher disk) is as follows: 

HEAVY INTERDICTION FIRE FALLING AT ... . 
The first four letters are enciphered as shown: 

Key text: TRUE 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT . . . 

Cryptogram: MNUJ 

The cipher letters MNUJ now form the keyletters for enciphering 
the next four plain-text letters, YINT, yielding OFHQ. The latter 
then form the keyletters for enciphering the next four letters, and so 
on, yielding the following: 

Key text: TRUEM NUJOF HQKOE IIVWU VQODR LOSGD . . . 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT . . . 

Cryptogram: MNUJO FHQKO EIIVW UVQOD RLOSG DBMGK . . . 

b. Instead of using the cipher letters in sets, as shown, the last 
cipher letter given by the use of the keyword may become the key- 
letter for enciphering the plain-text letter; the cipher resultant of the 
latter then becomes the keyletter for enciphering the following letter, 
and so on to the end of the message. Thus: 

Key text: TRUEJ LDQXT CZRPW OANIA JFAAP EffJDA . . . 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT . . . 

Cryptogram: MNUJL DQXTC ZRPWO ANIAJ FAAPE WJDAH . . . 

c. It is obvious that an initial keyword is not necessary; a single 
prearranged letter will do. 

d. The plain text itself may serve as a key, after an initial group or 
an initial letter. This is shown in the following example, wherein 
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the text of the message itself, after the prearranged initial keyword 
TRUE, forms the key text: 

Key text: TRUEH EAVYI NTERD ICTIO NFIRE FALLI . . . 

Plain text: HEAVY INTER DICTI ONFIR EFALL INGAT . . . 

Cryptogram: MNUJJ WNCUR KLCYV UPOAX JAIGT XNFLP . . . 

e. Although reversed standard alphabets have been used in all the 
foregoing examples, it is obvious that various types of alphabets may 
be employed, as prearranged. 

/. The following method, though it may at first appear to be quite 
different, is in reality identical with those just described. A mixed 
sequence is prepared and its elements numbered in sequence. Let 
the mixed sequence be derived from the keyword PERMUTABLY: 

657598124 10 
PERMUTABLY 
CDFGHIJKNO 
Q S V W X Z 

AJBKEDSLN MGWPCQ RFVTIZUHXYO 
12 3 4 5 6 7 8 910 11 12 1314151617181920 21 22 23 2425 26 

Let the message he the same as before, and let the first letter be its 
own cipher equivalent. Each cipher letter from that point on is 
produced in turn by finding the sum of the numerical equivalents of 
the preceding cipher letter and the plain-text letter to be enciphered. 
When this total exceeds 26 , the latter amount is deducted and the 
letter equivalent of the remainder is taken for the cipher letter. Thus: 

Key text: 0 23 2 3 21 20 14 23 16 21 11 17 11 25 18 12 12 

Plaintext: HEAVYINTERDICTION 

Numerical value: 23 5 1 18 25 20 9 19 5 16 6 20 14 19 20 26 9 

Keyed value: 28 5 21 46 40 23 42 21 37 17 37 25 44 58 38 21 

(less 26 or 52 if 

necessary): 23 2 3 21 20 14 23 16 21 11 17 11 25 18 12 12 21 

Ciphertext: HJBZICHRZGFGYVWWZ 

Key text: 21 12 6 22 1 18 19 1 9 3 12 23 24 

Plaintext: FIRE FALLING AT 

Numericalvalue: 17 20 16 5 17 1 8 8 20 9 11 1 19 

Keyed value: 58 52 22 27 18 19 27 9 29 12 25 24 45 

(less 26 or 52 if 

necessary): 12 6 22 1 18 19 1 9 3 12 23 24 17 

Ciphertext: WDUAVTANBWHXF 

g. In the foregoing example the successive cipher letters form the 
successive keyletters; but, as noted in subparagraph d, the successive 
plain-text letters may serve as the successive keyletters. 

h. The same results can be obtained by the use of sliding strips 
bearing the mixed alphabet. Study the following diagram showing 
the successive positions of the movable strip and compare the results 
with those obtained in / above. 
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i. One serious objection to such auto-key systems is that the results 
of errors are cumulative; one error affects all the succeeding letters, 
and if several errors are made, the messages are diffi cult to decrypto- 
graph. It is possible that this disadvantage can be minimized by the 
use of automatic cipher devices suitably constructed to accomplish 
the encipherment with speed and accuracy. 

41. Progressive-alphabet systems. — a. The special character- 
istic of these systems is that the members of a whole set of cipher 
alphabets are employed one after the other in progression and in a 
definite sequence. These systems are periodic in nature and the 
length of the period is usually equal to the total number of different 
cipher alphabets employed in the system. The sequence in which 
the various cipher alphabets are used may or may not change with 
each message; if it does, this constitutes an additional element of 
secrecy. i 

b. To illustrate what is meant by a progressive system a simple 
example will be given, employing the obsolete U. S. Army Cipher 
Disk. Starting with the disk set so that A— A (or with any other 
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prearranged initial setting), the first letter of the message is enciphered ; 
the revolving alphabet is then moved one step clockwise (or counter- 
clockwise) and the second letter is enciphered, and bo on. After 26 
letters have been enciphered, the disk has returned to its initial start- 
ing point and a second cycle begins (if the message is longer than 26 
letters). Thus, the period in this case is 26 letters. It is obvious 
that the displacement of the revolving disk may occur after every 
2, 3, 4 . . . letters, as prearranged, in which case the period increases 
correspondingly in length. The displacement may, however, be 
more complicated than this, and may occur after a constantly vary- 
ing number of letters has been enciphered, whereupon periodicity is 
suppressed. 

c. Two sliding mixed components may be employed, producing a 
set of 26 secondary mixed alphabets. 

d. Another variation is more complicated. Suppose the corre- 
spondents draw up a set of 100 random-mixed cipher alphabets, 
each accompanied by a designating number from 00 to 99, and a set 
of numerical keys composed of randomized sequences of numbers 
from 00 to 99. Each such numerical key is designated by an indica- 
tor of some sort. To encipher a message, a key sequence is selected 
and the cryptogram is prepared by means of the sequence of alpha- 
bets indicated by the key sequence. If the message is 100 or less 
letters in length, the alphabets do not repeat; if it is more than 100 
letters long, either the sequence of alphabets may repeat or else a 
new sequence is selected, as prearranged. It is possible to operate 
the system by means of indicators inserted in the text of the crypto- 
gram. 

42. Interrupted or variable-key systems. — In certain of the 
foregoing systems it was noted that periodicity is entirely avoided 
by the use of a key which is so long that it does not repeat itself ; often 
such a system is referred to as operating in connection with an indefi- 
nite, infinite, or unlimited key as contrasted with one that operates 
in connection with a definite, finite, or limited key. But periodicity 
may also be avoided by special manipulation of a limited key. Several 
such methods will be explained below. 

43. Suppressing periodicity by encipherment of variable- 
length groupings of the plain text. — a. A keyword, though limited 
in length, may nevertheless be applied to variable or invariable- 
length sections of the plain text. When, for example, each letter of 
the key serves to encipher a single letter of the plain text, the encipher- 
ment is said to be invariable or fixed in this respect. The same is 
true even if a single letter of the key serves to encipher regular sets 
of letters of the plain text; for example, each letter of the key may 
serve to encipher 2, 3, 4 . . . letters of the text. In these cases 
periodicity would be manifested externally by the cryptograms, 
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providing there is a sufficient amount of text to be examined. But 
if each letter of the key serves to encipher irregular or variable-length 
groupings of the plain text, then periodicity cannot appear except 
under rather remote contingencies. Suppose, for example, that so 
simple a scheme as letting each letter of the key serve to encipher a 
complete word of the text is used; since words are of irregular lengths 
and there is little or no regularity whatever in the sequence of words 
with respect only to their lengths, periodicity cannot appear. An 
example of encipherment will be useful. 

b. In the following example the simple cipher disk (direct se- 
quence sliding against reversed sequence) is used, with the keyword 
DEBARK, to encipher the following message, according to the scheme 
described above. Study it carefully. 



Key: D E B ARK 

Plain text: COLLECT ALL STRAGGLERS STOP SEND THEM 

Cipher: BPSSZBK ETT JIKBWQXKJ IHML ZNEO RDGY 

Key: D E B 

Plaintext: FORWARD AT ONCE 

Cipher: YPMHDMA EL NOZX 

Cryptogram: BPSSZ BKETT JIKBV VQXKJ IHMLZ NEORD 
GYYPM HDMAE LNOZX 



c. Instead of enciphering according to natural word lengths, the 
irregular groupings of the text may be regulated by other agreements. 
For example, suppose that it is agreed that every keyletter will 
encipher a number of letters corresponding to the numerical value 
of the keyletter in the normal alphabet. The foregoing example 
then becomes as follows: 



Key: D E B A R 

Plain text: COLL ECTAL LS T RAGGLERSSTOPSENDTH 

Cipher: BPSS ACLET QJ H ARLLGNAZZYDCZNEOYK 

Key: K D 

Plain text: EMFORWARDAT ONCE 

Cipher: GYFWTOKTHKR PQBZ 

Cryptogram: BPSSA CLETQ JHARL LGNAZ ZYDCZ NEOYK 
GYFWT OKTHK RPQBZ 

d. The foregoing example employed reversed standard alphabets, 
but mixed alphabets of all types may readily be used. 

e. If the keyword is short, and the message long, periodicity may 
creep in despite the irregular groupings in the encipherment. Suf- 
ficient evidence may even be obtained to lead to a disclosure of the 
length of the key. But if the key consists of a long word, or of a 
complete phrase or sentence, the text would have to be very long in 
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order that sufficient evidences of periodicity be found to make pos- 
sible the determination of the length of the key. 

44. Suppressing periodicity by encipherment by variable- 
length groupings of the key. — a. In paragraph 436 periodicity 
was suppressed by enciphering variable-length groupings of the text; 
in this paragraph it will be shown how periodicity may be suppressed 
by enciphering by variable-length groupings of the key. The 
method consists in interrupting the key. 

6. Given a keyword, it can become a variable-length key by inter- 
rupting it according to some prearranged plan, so that it becomes 
equivalent to a series of keys of different lengths. Thus, the single 
keyword UNPREPAREDNESS may be expanded to a sequence of 
irregular lengths, such as UNPREP / UNP / UNPREPAR / UNPR / 
UNPREPARE / UNPREPAREDN / U / UNPRE, etc. Various 
schemes for indicating or determining the interruptions may be 
adopted. For example, suppose it may be agreed that the interrup- 
tion will take place immediately after and every time that the letter R 
occurs in the plain text. The key would then be interrupted as shown 
in the following example: 

Key: UNPUN UNPRE PARED UNPRE UNPRU NP . . . 

Plain text: OURFR ONTLI NESAR ENOWR EPORT ED . . . 

c. It is possible to apply an interrupted key to variable-length 
groupings of the plain text. In illustrating this method, an indicator, 
the letter X, will be inserted in the plain text to show when the inter- 
ruption takes place. The plain text is enciphered by natural word 
lengths. 

Key: UN UNP U 

Plain text: OUR FRONTX LINES ARE NOWX REPORTED 

d. It is also possible to interrupt the key regularly, cutting it up 
into equal length sections as, for example, with the keyword EXTIN- 
GUISHER: EXT/XTI/TIN/ING/NGU/GUI/UIS/ISH/SHE/HER. 
Each set of three keyletters may serve to encipher a set of three plain- 
text letters. But it is possible to make each set of three keyletters 
apply to more than three plain-text letters, or to irregular groupings 
of plain-text letters. For example, suppose a numerical key be 
derived from the keyword: 

EXTINGUISHER 
1-12-10—5—7—3-11—6 — 9 — 4 — 2 — 8 

Let this numerical sequence determine how many letters will be 
enciphered by each grouping of the key. The example below will 
illustrate (reversed standard alphabets are used): 
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Numbers: 1 12 10 5 

Key: E XTIXTIXTIXTI TINTINTINT INGIN 

Plain text: C OLLECTALLSTR AGGLERSSTO PSEND 

Cipher: C JIXTRPXIXFAR TCHIEWBQUF TVCVK 

Numbers: 7 3 11 

Key: NGUNGUN GUI UISUISU 

Plain text: THEMFOR WAR DATONCE 

Cipher: UZQBBGW KUR RIZGVQQ 

Cryptogram: CJIXT RPXIX FARTC HIEWB QUFTV 

CVKUZ QBBGW KURRI ZGVQQ 

e. Another simple method of prearranging the interruption of a 
keyword or of plain text is to employ the sequence of numbers given 
by reducing an incommensurate fraction to decimals. For example, 
the fraction K yields the sequence 142857142857 . . . This fraction 
may be represented by the indicator letter H given as the initial letter 
of the cryptogram. 

45. Mechanical cryptographs in which periodicity is 
avoided. — There are certain cryptographs which operate in such a 
manner that periodicity is avoided or suppressed. Some of them will 
be discussed in Section XII. Among them one of the most interesting 
is that invented by Sir Charles Wheatstone in 1867. As a rule, how- 
ever, mechanical cryptographs, by their very nature, can hardly avoid 
being cyclic in operation, thus causing periodicity to be exhibited in 
the cryptograms. 
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46. Superencipherment. — a. When, for purposes of augmenting 
the degree of cryptographic security, the plain text of a message 
undergoes a first or primary encipherment and the resulting cipher 
text then undergoes a second or secondary encipherment, the system 
as a whole is often referred to as one involving superencipherment. If 
the two or more processes are well selected, the objective is actually 
reached, and the resulting cryptograms present a relatively great 
degree of cryptographic security; but sometimes this is not accom- 
plished and the augmented security is of a purely illusory character. 

The final cryptographic security may, in fact, be no greater in degree 
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than if a single encipherment had been effected, and in unusual cases 
it may even be less than before. 

b. It is impossible to describe all the combinations that might be 
employed; only a very few typical cases can here be treated, and these 
will be selected with a view to illustrating general principles. It is 
possible to pass a message through 2, 3, . . . successive processes of 
substitution; or through 2, 3, . . . successive processes of transposition; 
or substitution may be followed by transposition or vice versa. An 
example of each type will be given. 

c. It will be convenient to adopt the symbol C to represent the 
cipher text produced by any unspecified process of encipherment. 
The symbols C 1; C s , C 3 , ... , will then represent the successive texts 
produced by successive processes in superencipherment. The sub- 
script letter a or t may be prefixed to the C to indicate that a given 
process is one of substitution or of transposition. Thus, the steps in a 
system where a first substitution is followed by a second substitution 
can be represented symbolically by sCi-^sC 2 . In a similar manner, 
tCi~>tC 2 represents double transposition. The symbol sCi-^Cg 
means that the text from a first process of substitution undergoes 
transposition as a second process. 

Repetitive monoalphabetic substitution systems. — Sup- 
pose a message undergoes a primary encipherment by means of a 
single-mixed, nonreciprocal alphabet, and the primary cipher text 
undergoes a secondary encipherment by means of the same or a 
different mixed alphabet. The resulting cryptogram is still mono- 
alphabetic in character, and presents very little, if any, augmentation 
in the degree of security (depending upon the type of alphabet em- 
ployed). Here an entirely illusory increase in security is involved and 
an ineffectual complexity is introduced; the process may indeed be 
repeated indefinitely without producing the desired result. This is 
because the fundamental nature of monoalphabetic substitution has 
not been taken into consideration in the attempts at superencipher- 
ment; «Ci-*sC a -»sCa . . . , still remains monoalphabetic in character. 

If f*r. Combined monoalphabetic and polyalphabetic substitu- 
5® tion systems. — a. If a message undergoes a primary encipherment 
| by the repeating-key method, using standard alphabets, and the 
( primary cipher text then undergoes a secondary encipherment by 

( means of a single-mixed alphabet, the degree of cryptographic secur- 
ity is increased to the same extent that it would be if the original 
message had undergone the same primary encipherment with second- 
ary alphabets resulting from the sliding of a mixed primary sequence 
against the normal sequence. This increase in security is not very 
1 great. 
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b. The same is true if the primary encipherment is monoalphabetic 
and the secondary encipherment is polyalphabetic by the method 
described. 

c. In general, this also applies to other types of polyalphabetic and 
monoalphabetic combinations. The increase in security is not very 
great, and is, indeed, much less than the uninitiated suspect. 

49. Repetitive polyalphabetic substitution systems. — a. If 
the primary encipherment is by means of the repeating-key principle, 
with standard alphabets, and the secondary encipherment is similar 
in character, with similar alphabets, and a key of similar length, the 
final cryptogram presents no increase in security at all. Thus, if the 
key BCDE is used in the primary encipherment (VigenSre Method) 
and the key FGHI is used in the seco ndar y encipherment, the final 
result is the same as though the 1 i J^lTTTlin l been used in a single ^ I K H 
encipherment. - — " 

b. If mixed alphabets are used, and if those of the primary and the 
secondary encipherment belong to the same series of secondary 
alphabets resulting from the sliding of two primary sequences against 
each other, the results are similar in character to those described 
under a above. They are identical with those that would be obtained 
by an equivalent single encipherment by the appropriate secondary 
alphabets. 

c. If the key for the secondary encipherment is of a different length 
from that for the primary encipherment, the results are, however, 
somewhat different, in that the period of the resultant cryptogram 
becomes the least common multiple of the two key lengths. For 
example, if the length of the key for the primary encipherment is 4, 
that for the secondary 6, the result is the same as though a key of 12 
elements had been employed in a single encipherment. This can be 
demonstrated as follows, using the keys 4-1-2-3 and 5-2-6-1-4-3: 



41234123 4123 
52614352 6143 
93848475 10 266 



41234123 4123 4123.. 
52614352 6143 5261.., 

93848475 10 266 9384... 



d. The degree of cryptographic security is, without doubt, increased 
by such a method. If the key lengths are properly selected, that is, 
if they present no common multiple less than their product, the 
method may give cryptograms of great security. For example, two 
keys that are 17 and 16 characters in length would give a cryptogram 
that is equivalent in period to that of a cryptogram enciphered once 
by a key 17 X 16, or 272 elements in length. The fundamental prin- 
ciple of an excellent, though complicated printing telegraph cipher 

system is this ve ry pri nciple. 

<9. Repetitive transposition systems. — These have been dealt [ 
with in Se otio ii f l H , and need no further discussion at this point. ~Tt 

cm- Go— jtunWv. 
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51. Combined substitution and transposition systems. — 



the nest aeo t i e a in rimrntori- Combinations of substitution and 
transposition methods can take many different forms, and only a few 
examples can be illustrated herein. It is possible, of course, to apply 
substitution first, then transposition, or transposition first, then 
substitution. The most commonly encountered systems, however, 
are of the former type, that is, 8Ci-^tC 2 . Furthermore, it can be 
stated that as a rule practicable systems in which both processes are 
combined use methods that are relatively simple in themselves, but 
are so selected as to produce cryptograms of great security as a result 
of the combination. To give a very rough analogy, in certain com- 
binations the effect is much more than equivalent to the simple addi- 
tion of complexities of the order X and Y, giving X-{- Y\ it is more 
of the order XY, or even X 2 Y 2 . 



Section XI 



ilNED 



ff SYSTEMS 



w Paragraph S| 

etio and polyalphabetic substitution combined with transposi- 



Monoalphabetio and polyalphabetic substitution combined wit) 
tion 



Polyliteral substitution combined with transposition 53 

Fractionating systems 54 

Comparison of foregoing fractionating system with certain digraphie 

systems 55 

Fractionating Bystems as forms of combined substitution and transposition. . 56 
Fractionation and recombination within regular or variable groupings of 

fractional elements 67 

Fractionation combined with columnar transposition 58 



>2. Monoalphabetic and polyalphabetic substitution com- 



bined with transposition. — a. A message may undergo simple 



monoalphabetic substitution or complex polyalphabetic substitution 
and the resulting text passed through a simple transposition. Ob- 
viously, either standard or mixed alphabets may be employed for the 
substitution phase and for the transposition phase any one of the 
simple varieties of geometric-design methods may be applied. 

b. As an example, note the following simple combination, using the 
message ALL ACTION AT LANDING BEACH HAS CEASED. 
1st step: «C t (monoalphabetic, by mixed alphabet): 



Plain: ABCDEFGHIJKLMNOFQRSTUVWXYZ 

Cipher: TDRAMOBNILPEZYXWUSQKJHGFC 

Message: ALLAC TIONA TLAND INGBE ACHHA SCEAS ED 
Cipher: TEETR QIXYT QETYA IYBDM TRNNT SRMTS MA 
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2d step: fC 2 (as prearranged between correspondents): 

TEETRQIX (For the inscription ; a rectangle of eight columns.) 
YTQETYAI 

YBDMTRNN (For the transcription; counterclockwise route beginning 
TSRMTSMA at lower right hand comer.) 

Cryptogram: ANIXI QRTEE TYYTS RMTSM NAYTE QTBDM TR 

c. A simple subterfuge often adopted between correspondents is to 
write the substitution text backwards to form the final cryptogram 
(a case of simple reversed writing). 

d. An extremely simple and yet effective transposition method 
(when its presence is not suspected) sometimes employed as a pre- 
liminary to substitution is that in which the text of a message is 
first divided into halves; the second being placed under the first as 
in rail-fence writing. Thus: 

P0ED00TFMAKT0 

RCETPROEBRAIN 

Then encipherment by simple monoalphabetic methods may be 
effected and the cipher text taken from the two separate lines. 
Thus, if a standard alphabet one letter in advance were used, the 
text would be as follows: 

QPFEPPUGNBLUP 
SDFUQSPFCSBJO 
Cryptogram: QPFEP PUGNB LUPSD FUQSP FCSBJ 0 

e. A simple variation of the foregoing method which is frequently 
effective with true digraphic methods of substitution is to write 
under 0 1 ,, and then encipher the sets of juxtaposed ¥¥ v letters di- 
graphically, then the sets of juxtaposed letters. Thus, let the 
message be WILL RETURN AT ONCE; it would be written down 
as follows: 1 

WLRTRAOC 

ILEUNTNE 

Then the following pairs would be enciphered: WL P , KT P , KX P , 
OCp, iLp, etc. The foregoing message enciphered in this manner 
by means of the Playfair Square shown in Figure 39, for example, 
yields the following cryptogram: 

Plain text: WL RT RA 0C IL EU NT NE 
Cipher: VO IR TN LT CQ HN AR RP 

Cryptogram: VOIRT NLTCQ HNARR P 

1 In preparing the text for encipherment, the clerk must bear in mind that if 
a Playfair Square is to be used no doublets can be enciphered. The message 
WE WILL LEAVE . . . would be arranged thus: 

WXILXEV 
fcwl . Xl . AE 
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/. Naturally the transposition process may involve groups of let- 
ters; a simple type of disarrangement is to reverse the order of the 
letters in 5-letter groups, or within 5-letter groups a transposition 
such as 3-2-1-4-5 or 2-1-5-3-4 (any of 120 different arrangements) 
is possible. 

g. Columnar transposition methods lend themselves especially well 
to combination with substitution methods. An excellent example 
will be considered under the next section. 

53. Polyliteral substitution combined with transposition. — 
In paragraph 296 the essential nature of polyliteral substitution as 
contrasted with monoliteral substitution was discussed. Polyliteral 
methods make use of polypartite alphabets in which the cipher 
equivalents are composed of two or more parts. This being the case 
it is a natural extension of cryptographic processes to separate these 
parts or to distribute them throughout the cipher text so that the 
components or, so to speak, fractional parts of the cipher equiva- 
lents are thoroughly disarranged and distributed evenly or irregularly 
throughout the text. 

54. Fractionating systems. — a. A simple example will first be 
shown. Let the following bipartite cipher alphabet be drawn up by 
assigning numerical equivalents from 01 to 26 in mixed sequence to 
the letters of the normal sequence. Thus: 

ABCDEFGHIJKLM 

02 11 06 12 13 05 10 14 09 15 16 17 01 

NOPQRSTUVWXYZ 

03 18 19 20 08 21 07 04 22 23 24 25 26 

Each letter is represented by a combination of two digits; in prepar- 
ing the message for cryptographing, the two digits comprising the 
cipher equivalent of a letter are written one below the other, thus: 

Plain text: ONE PLANE REPORTED LOST 

rinwi*\> : 101 11001 01110011 1120 

P K: 833 97233 83988732 7817 

By recombining the single digits in pairs, reading from horizontal 
lines, and writing down the pairs in unchanged numerical form, one. 
obtains the following: 

10 11 10 01 01 11 00 11 11 20 
83 39 72 33 83 98 87 32 78 17 

6. The foregoing cipher text can be transmitted in 5-figure groups, 
or it can be reconverted into letters by one means or another, but 
some difficulties are encountered in the latter case because every one 
of 100 different pairs of digits has to be provided for, thus necessitat- 
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ing a 2-letter substitution, which would make the cipher text twice 
as long as the plain text. 

e. In the methods to follow presently, these difficulties are avoided 
by a simple modification. This modification consists in the employ- 
ment of true polyfid cipher alphabets, that is, polypartite alphabets in 
which the plain component is the normal sequence and the cipher 
component consists of a sequence of equivalents composed of all the 
permutations of 2, 3, 4, . . . symbols taken in definite groups. For 
example, a bifid alphabet 1 composed of permutations of five digits 
taken two at a time can be constructed, yielding a set of 25 equiva- 
lents for a 25-letter alphabet (I and J being usually considered as one 
letter). A trifid alphabet of 27 equivalents can be constructed from 
all the permutations of the digits 1, 2, 3, taken three at a time; an 
extra character must, however, be added to represent the 27th ele- 
ment of the alphabet. It is convenient to represent the parts of a 
bifid equivalent by the symbols 6 l c and the parts of a trifid 
equivalent, by the symbols 0 l o , 8? e and 0V 
d. Polyfid cipher alphabets may be systematically- mixed alphabets 
based upon keywords and keyphrases. For example, note how the 
following bifid alphabet is derived from the keyphrase XYLO- 
PHONIC BEDLAM: 

XYLOPHNICBEDA 
11 12 13 14 15 21 22 23 24 25 31 32 33 

MFGKQRSTUVffZ 
34 35 41 42 43 44 45 51 52 53 54 55 



The same principle may be applied to trifid alphabets, employing the 
permutations of the three digits 1, 2, and 3, taken in groups of three. 

e. Note the following bifid alphabet and the example of its use in 
enciphering a message: 

ABC DEFGHI-JKLM 
12 31 21 32 33 15 25 34 24 35 41 11 



NOPQRSTUVffXYZ 
13 42 43 44 23 45 22 14 51 52 53 54 55 



Message: 

Cipher 



\e\: 

[e\: 



ONE PLANE REPORTED LOST 
413 44113 23442233 4442 
233 31233 33323232 1252 







i 



'll 



1 Such an alphabet should be clearly differentiated from a biliteral alphabet. 
In the latter, two and only two elements are employed, in groups of fives, yield- 
ing 25 or 32 permutations. The Biliteral Cipher of Sir Francis Bacon and the 
Baudot Alphabet of modem printing telegraph systems are based upon alphabets 
that are typical examples of biliteral alphabets. The designation digraphic alpha- 
bet will be applied to one in which the cipher equivalents are composed of any 
number of symbols, n, taken simply in groups of two, these symbols not being 
permuted in systematic fashion to produce a complete set of 2“ equivalents. 
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The bifid elements, 0 1 ,, and 0* c , are now recombined horizontally in 
pairs and the pairs are reconverted into letter equivalents of the basic 
alphabet which, for the sake of convenience, is here arranged in the 
form of a deciphering alphabet: 

11 12 13 14 15 21 22 23 24 25 31 32 33 
MANUFCTRIGBDE 

34 35 41 42 43 44 45 51 52 53 54 55 
HKLOPQSVWXYZ 

Cryptogram: LHLNR QTEQO REAEE DDDAff 

j. It will be noted that there are four basic steps involved in the 
foregoing encipherment: (1) A process of decomposition, substitutive 
in character, in which each 0 P is replaced by a bipartite 0 C , composed of 
two parts, 0* o and 0® c , according to a bifid alphabet; (2) a process of 
separation, transpositive in character, in which each 0* o is separated 
from the 0*0 with which it was originally associated; (3) a process of 
recombination, also transpositive in character, in which each 0' o is 
combined with a 0*0 with which it was not originally associated; and 
finally (4) a process of recomposition, substitutive in character, in 
which each new 0‘ o 0 2 c combination is given a letter value according to 
a bifid alphabet. In the foregoing example (e above), the alphabet for 
the recomposition was the same as that for the decomposition; this, 
of course, is not an inherent necessity of the system ; the decomposition 
and recomposition alphabets may be entirely different. This is 
shown in the example in paragraph 55 d. 

55. Comparison of foregoing fractionating system with 
certain digraphic systems. — a. The method described under 
paragraph 54e can be identified with some of the digraphic substitu- 
tion systems discussed in Section VII. 

b. Take the message of paragraph 54e and let a slight modification 
in the method of recombining 6 1 0 and 0 2 o be made. Specifically, let 
the first halves and the second halves of the bifid equivalents of the 
plain-text letters be combined in the following manner, using the 
bifid alphabet of paragraph 54e: 

Message: ONE PLANE REPORTED LOST 

ON EP LA NE RE PO RT ED LO ST 

41=L 34=H 41=L 13=N 23=R 44=Q 22=T 33=E 44=Q 42=0 

23=R 33=E 12= A 33=E 33=E 32=D 32=D 32=D 12=A 52=W 

Cryptogram: LRHEL ANERE QDTDE DQAOff 

If the cryptogram given in paragraph 54e were split in the middle into 
two sections, and the letters taken alternately, the result would be 
identical with that obtained in this subparagraph. The identification 
referred to in a above is now to be demonstrated in c below. 
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c. Note the 2-alphabet checkerboard shown in Figure 44. If 
the same message is now enciphered by its means, a cryptogram 
identical with that obtained in paragraph 55b will be obtained. 
Thus: 

Message: 

ONE PLANE REPORTED LOST 
Substitution of pairs: 

0N p =LRe; EP p =HEe; LA p =LA e ; NE P =NE„; 
REp=RE c ; etc. 

Cryptogram: 

LRHEL ANERE etc. 



d. In the example in paragraph 54e, the same bifid alphabet was 
used for the recomposition as for the decomposition. Instead of con- 
verting the combined fl l c <P 0 elements into letters by means of the 
original bifid alphabet, suppose a second bifid alphabet specifically 
drawn up for this recomposition is at hand (see par. 54/). Thus: 



11=A 


21=B 


31=C 


41=K 


51=V 


12=U 


22=1 


32=D 


42=N 


52=W 


I3=T 


23=L 


33=F 


43=P 


53=X 


14=0 


24=E 


34=G 


44=Q 


54=Y 


15=M 


25=S 


35=H 


45=R 


55=Z 


The encipherment of the message is then as follows: 




Message: ONE PLANE REPORTED LOST. 




Alphabet for decomposition 




Alphabet for recomposition 


A=12 


N=13 




11=A 


34=G 


B=31 


0=42 




12=U 


35=H 


C=21 


F=43 




13=T 


41=K 


D=32 


Q=44 




14=0 


42=N 


E=33 


R=23 




15=M 


43=P 


F=15 


S=45 




21=B 


44=Q 


G=25 


T=22 




22=I-J 


45=R 


H=34 


U=14 




23=L 


51=V 


I-J=24 


V=51 




24=E 


52=W 


K=35 


W=52 




25=S 


53=X 


L=41 


X=53 




31=C 


54=Y 


M=ll 


Y=54 




32=D 


55=Z 




Z=55 




33=F 





M A N U F 
C T R I G 
BDEHK 
LOPQS 

v w x y z 



UCBLV 
A T D 0 W 
N R E P X 
U I H Q Y 
F G K S Z 



Figure 44. 
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Encipherment: 

ON EP LA NE RE PO RT ED LO ST 

41=K 34=G 41=K 13=T 23=L 44=Q 22=1 33=F 44=Q 42=N 

23=L 33=F 12=U 33=F 33=F 32=D 32=D 32=D 12=U 52=W 

Cryptogram: KLGFK UTFLF QDIDF DQUNW 

e. Now encipher the same plain-text message by means of the 
4-alphabet checkerboard shown in Figure 45. The results are as 
follows: 

Message: ONE PLANE REPORTED LOST. 



M A N U F 
C T R I G 
B D E H K 
LOPQS 
V W X Y Z 


A U T 0 M 
BILES 
C D F G H 
K N P Q R 
V W X Y Z 


A B C K V 


BCBLV 


U I D N W 


A T D 0 W 


T L F P X 


N R E P X 


0 E G Q Y 


U I H Q Y 


MSHRZ 


F G K S Z 



Figubk 45. 



Plain text: ON EP LA NE RE PO RT ED LO ST 

Cipher pairs: KL GF KU TF LF QD ID FD QU NW 

Cryptogram: KLGFK UTFLF QDIDF DQUNW 

The results are identical with those obtained under d above. 

j. If the successive letters of the cryptogram of b above are en- 
ciphered monoalphabetically by means of the following alphabet, the 
results again coincide with those obtained under d and e above. 

Alphabet 

Ci': ABCDEFGH I-J KLMNOPQRSTUVWXYZ 
C 2 : UCBDFMSG E H K A TN P Q L R I 0 V W X Y Z 

First cryptogram: LRHEL ANERE QDTDE DQAOW 
Final cryptogram: KLGFK UTFLF QDIDF DQUNW 

56. Fractionating systems as forms of combined substitu- 
tion and transposition. — In studying the various types of checker- 
board substitution discussed in Section VIII, it was not apparent, and 
no hint was given, that these systems combine both substitution and 
transposition methods into a single method. But the analysis pre- 
sented in paragraph 55 shows clearly that there is a kind of trans- 
position involved in checkerboard methods of ciyptographing. 
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57. Fractionation and recombination within regular or 
variable groupings of fractional elements. — a. This method is an 
extension or modification of that illustrated in paragraph 54e. Let 
the text be written out in groups of 3, 4, 6, . . . letters, as prearranged 
between the correspondents. Suppose groupings of five letters are 
agreed upon; a bifid alphabet (that in par. 54e) is used for substitu- 
tion; thus: 

Message: ONEPL ANERE PORTE DLOST 
41344 11323 44223 34442 
23331 23333 32323 21252 

Then, let the recombinations be effected within the groups hori- 
zontally. Thus, for the first group the recombinations are 41, 34, 
42, 33, and 31. The entire message is as follows: 

41.34.4 11.32.3 44.22.3 34.44.2 
2.33.31 2.33.33 3.23.23 2.12.52 
Recomposition (using the same bifid alphabet as was used for the 
decomposition) yields the cryptogram: 

LHOEB MDDEE QTERR HQTAW 

b. As indicated, other groupings may be employed. Furthermore, 
a different bifid alphabet for the recomposition may be used than was 
employed for the original substitution or decomposition. It is also 
clear that sequences of variable-length groupings may also be em- 
ployed, as determined by a subsidiary key. 

c. Trifid alphabets also lend themselves to these methods. Note 
the following example: 



Alphabet for decomposition 




Alphabet for recomposition 


A =222 




J=312 S=131 




111=1 


2U=U 


311=V 


B=322 




K=112 T=122 




112=K 


212=N 


312=J 


C=121 




L=231 U=211 




113=W 


213=H 


313 =ZB 


D=133 




M=323 V=311 




121=C 


221 =X 


321=E 


E=321 




N=212 W=113 




122=T 


222= A 


322=B 


F=123 




0=333 X=221 




123=F 


223 =Y 


323 =M 


G=332 




P=233 Y=223 




1,31 =S 


231 =L 


331 =Q 


H=213 




Q=331 Z=132 




132=ZA 


232=R 


332=G 


1=111 




R=232 ?=313 




133 =D 


233 =P 


333=0 


Message: 


HAS AIRPLANE 


RETURNED YET? 


HAS 


A 


I R P L A N 


E R E T U 


R N E D Y 


E T ? 


2 2 1. 


2 


1 2 2 2.2 2 


3 2 


3.1 2 


2 2 3.1 2 


3 13 


1.2 3 


2. 


.1 3.3 3 2.1 


2.3 


2 2.1 


3.1 2 3.2 


2 2 1 


3 2.1 


2 


1 2 3.1 2 2 


1 2. 


12 1 


2 2.1 3 3 


12 3 
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Cipher text: 1 XURZXC AYGFT MTBKC YFFAD ZBXF 
Final cryptogram: XURZA CAYGF TMTBK CYFFA DZBXF 
d. Bifid and trifid alphabets may be combined within a single sys- 
tem with appropriate groupings, but such combinations may be con- 
sidered as rather impracticable for military usage. 

68. Fractionation, combined with columnar transposi- 
tion. — a. An excellent system of combined substitution-transpo- 
sition that has stood the test of practical, war-time usage is that now 
to be described. Let a 36-character bipartite alphabet square be 
drawn up, and a message enciphered, as follows: 

MONTHS 



(Key for internal alphabet: HAIL COLUM- 
BIA HAPPY LAND. Digits are inserted 
immediately after each letter from A to J, 
A being followed by 1, B, 2, etc.) 



Message: 

ADVANCE PROGRESSING SATISFACTORILY OVER 400 PRIS- 
ONERS AND 5-75 MM GUNS CAPTURED. SECOND OBJECTIVE 
REACHED AT 5:15 P. M. 

Substitution: 




A 


D 


V 


A 


N 


C 


E 


P 


R 


0 


G 


R 


E 


S 


S 


WN NS 


RN 


WN 


NH 


10 


TO 


NN 


ES 


IT 


TS 


ES 


TO 


RM RM 


I 


N 


G 


S 


A 


T 


I 


S 


F 


A 


C 


T 


0 


R 


I 


WH NH 


TS 


RM 


WN RO 


WH 


RM 


TT 


WN 


10 


R0 


IT 


ES 


WH 


L 


Y 


0 


V 


E 


R 


4 


0 


0 


P 


R 


I 


S 


0 


N 


IM 


NT 


IT 


RN 


TO 


ES 


TM 


EN 


EN 


NN 


ES 


WH 


RM 


IT NH 


E 


R 


S 


A 


N 


D 


5 


7 


5 


M 


M 


G 


U 


N 


S 


TO 


ES 


RM 


WN 


NH NS 


TN 


EM 


TN 


IS 


IS 


TS 


IH 


NH RM 


C 


A 


P 


T 


U 


R 


E 


D 


S 


E 


C 


0 


N 


D 


0 


10 


WN 


NN 


RO 


IH ES 


TO 


NS 


RM 


TO 


10 


IT 


NH 


NS 


IT 


B 


J 


E 


C 


T 


I 


V 


E 


R 


E 


A 


C 


H 


E 


D 


NM E0 


TO 


10 


RO WH 


RN 


TO 


ES 


TO 


WN 


10 


WM 


TO 


NS 


A 


T 


5 


1 


5 


P 


M 


















WN R0 


TN 


WT 


TN NN 


IS 



















1 The reason for the regrouping shown in the final cryptogram requires a con- 
sideration of the fact that a trifid alphabet involves the use of 27 characters. 
Since our alphabet contains but 26 letters, either an extra symbol would have to 
be used (whioh is unpractical) or some subterfuge must be adopted to circumvent 
the difficulty. This has been done in this case by using ZA and ZB to represent 
two of the permutations in the recomposition alphabet. In decryptographing, 
when the clerk encounters the letter Z in the text, it must be followed either by 
A or by B; according to the alphabet here used, ZA represents permutation 132, 
and ZB represents permutation 313. In order not to introduce a break in the 
regulation Wetter groupings of cipher text, the final cryptogram is regrouped 
strictly into fives. 
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The Cj text is now inscribed in a rectangle of predetermined dimen- 
sions. Transposition rectangle: (Columnar, based on key HAIL 
COLUMBIA HAPPY LAND.) 



H 


A 


I 


L 


C 


0 


L 


U 


U 


B 


I 


A 


H 


A 


P 


P 


Y 


L 


A 


N 


D 


8—1- 


-10-12—6-17- 


-13-20-15—5- 


-11—2- 


-9- 


-3-18-19-21-14- 


-4- 


■16—7 


w 


N 


N 


S 


R 


N 


« 


N 


N 


H 


I 


0 


T 


0 


N 


N 


E 


S 


I 


T 


T 


s 


E 


S 


T 


0 


R 


U 


R 


U 


n 


H 


N 


H 


T 


S 


R 


M 


W 


N 


R 


0 


n 


H 


R 


M 


T 


T 


w 


N 


I 


0 


R 


0 


I 


T 


E 


S 


W 


H 


I 


M 


N 


T 


I 


T 


R 


N 


T 


0 


E 


s 


T 


M 


E 


N 


E 


N 


N 


N 


E 


S 


W 


H 


R 


M 


I 


T 


N 


H 


T 


0 


E 


S 


R 


M 


W 


N 


N 


H 


N 


S 


T 


N 


E 


M 


T 


N 


I 


S 


I 


S 


T 


S 


X 


H 


N 


H 


R 


U 


I 


0 


w 


N 


N 


N 


R 


0 


I 


H 


E 


S 


T 


0 


N 


S 


R 


U 


T 


0 


I 


0 


I 


T 


N 


H 


N 


S 


I 


T 


N 


M 


E 


0 


T 


0 


I 


0 


R 


0 


W 


H 


R 


N 


T 


0 


E 


S 


T 


0 


W 


N 


I 


0 


W 


M 


T 


0 


N 


S 


W 


N 


R 


0 


T 


N 


ff 


T 


T 


N 


N 


N 


I 


S 



































Cryptogram: 

NEHIM TOION ONOEM NMRSO TTENR OWNIN 
ISTNN OWHWO TSISI OROTN NSEMI STONH 
ENNST WSWTR MRSTN THINW HTOWN SRTIN 
ITWNI HRMRH RONST MRTIH NNIWM WOTST 
OWSWH ESWTT NNMIS ESNOT TRMWN NHETN 
RTTHI SEONS ENNMI HRNRS NHIOR ONRNE 
OTOTM EMWNN OINT 

Fiona* 46. 

b. One of the important advantages of this type of cipher is that 
it affords accuracy in transmission since the text is composed of a 
limi ted number of letters. In fact, if the horizontal and vertical 
coordinates of the cipher square are the same letters, then the cryp- 
tographic text is composed of permutations of but six different letters, 
thus aiding very materially in correct reception. Indeed, it is even 
possible to reconstruct completely a message that has been so badly 
garbled that only half of it is present. This cipher system was used 
with considerable success by the German Army in 1917-18, and was 
known to the Allies as the ADFGVX Cipher, because these were 
the letters used as horizontal and vertical coordinates of the cipher 
square, and consequently the cipher text consisted solely of these 
six letters. 

c. The cipher text of the foregoing message is, of course, twice as 
long as the plain text, but it can be reduced to exactly the original 
plain-text length by combining the distributed or transposed 6\ 
and 0 2 „ elements in pairs, referring to the original (or a different) 
polypartite square, and recomposing the pairs into letters. In this 
case, the horizontal and vertical coordinates must be identical in 
order to permit of finding equivalents for all possible pairs. 

119555°— 30 6 
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Section XII 
CRYPTOGRAPHS 



Paragraph 

Preliminary remarks 69 

Wheatstone Cipher 60 

Jefferson Cipher 61 

S U. 8. Army cipher device, type M-94 62 



59. Preliminary remarks. — The cipher systems described in the 
preceding sections by no means exhaust the category of complex 
systems, but it is impossible to describe them all. Furthermore, 
each one presents innumerable possibilities for modification in minor 
respects and for combination with other methods. In the paragraphs 
to follow, the principles upon which certain of the more simple 
mechanical cryptographs have been based will be described. 

€0. Wheatstone Cipher. — a. The device is a little more than four 
inches in diameter, and consists of a dial with two hands, as shown 
in Figure 47. The dial is composed of two independent circles of 
letters. In the outer circle the letters progress clockwise in normal 
alphabetic sequence, but there is an extra character between the Z 
and the A, making a total of 27 characters. Some of the spaces also 
have digits inscribed in them, for enciphering numbers. In the 
inner circle the letters are arranged in mixed alphabetic sequence 
and are inscribed either on a surface which permits of erasure, or on 
a detachable cardboard circle which can be removed and replaced 
by another circle bearing a different sequence. In Figure 47 this 
inner sequence is a systematically mixed sequence derived from the 
keyword FRANCE, as follows: 

1 2 3 4 5 6 
FRANCE 
B D G H I J 
K L M 0 P Q 
S T U V W X 
Y Z 

FBKSYRDLTZAGMUNHOVCIPWEJQX 

b. The two hands are pivoted concentrically, as are the hour 
and minute hands of a clock. Now, in a clock, the minute hand 
makes a complete revolution, while the hour hand makes only 
of a complete revolution; the action in the case of this device, how- 
ever, is somewhat different. The short hand is free to move inde- 
pendently of the long one, although the motion of the latter affects 
the former. Since the outer circle has 27 spaces and the inner one 
only 26, by a simple mechanical contrivance each complete revolu- 
tion of the long hand causes the short hand to make l%t revolutions, 
thus causing the short hand to point one place in advance of where 
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it pointed at the end of the preceding revolution of the long hand. 
For example, when the long hand ia over B of the outer circle and 
the short hand points to R of the inner circle, if the long hand is 
pushed clockwise around the dial, making a complete revolution, 
the short hand will also make a complete revolution clockwise plus 



one space, thus pointing to D. 

e. To encipher a message, the long hand and the short hand are 
set to prearranged initial positions. It is usual to agree that the 
plain-text letters will be sought in the outer circle of letters, their 
cipher equivalents in the inner circle; and that the long hand is 
invariably to be moved in the same direction, usually clockwise. 




Suppose the message to be enciphered is SEND AMMUNITION 
FORWARD. The long hand is moved clockwise until it is directly 
over S on the outer sequence. The letter to which the short hand 
points is the cipher equivalent of S and is written down. Then the 
long hand is moved clockwise to a position over E, the letter to 
which the short hand points is noted and written down. When a 
double letter occurs in the plain text, as in the case of the double 
M of AMMUNITION, some infrequently used letter, such as Q, 
must be substituted for the second occurrence of the letter. To 
decipher a message, the hands are returned to their initial prear- 
ranged positions, and then the long hand is moved clockwise until 
the short hand points to the first cipher letter; the long hand is then 
directly over the plain-text letter. The process is continued until 
all the letters have been deciphered. 

d. A consideration of the foregoing details shows that the encipher- 
ment of a message depends upon a combination of the following 
variables: 
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(1) The sequence of letters in the outer circle. In the case just 
considered, this sequence must be regarded as a known sequence, 
since it consists merely of the normal alphabet plus one character. 

(2) The sequence of letters in the inner circle. 

(3) The initial juxtaposition of the two sequences. 

(4) The exact composition of the text to be enciphered, since this 
will determine the number of revolutions of the long hand required 
to encipher a given number of letters of the message. 

e. It is obvious that if the outer alphabet is made a mixed alphabet, 
as well as the inner, both being different, the cryptograms will be 
made more secure against cryptanalysis. 

j. The same results as are obtained by using the device can be 
obtained by using sliding strips of paper, providing the operator will 
bear in mind that every time a 0 D on the plain component is situated 
to the left of the preceding he must displace the cipher component 
one interval to the left, if the correspondents have agreed upon a 
clockwise movement of the long hand, or to the right, if they have 
agreed upon a counterclockwise movement of the long hand. 

61. Jefferson Cipher. — a. Credit for the invention of the cipher 
system and device now to be described belongs to Thomas Jefferson, 1 
the original inventor, although it was independently invented many 
years later (1891) by a French cryptographer, Commandant Bazeries, 
and still later (1914) by Captain Parker Hitt, U. S. Army (now 
Colonel, U. S. Army, Ret.). Because it was first described in print 
(1901) by Bazeries, the principle upon which the cipher system is 
based is usually referred to in the literature as the Bazeries principle; 
for the sake of historical accuracy, however, it is herein called the 
Jefferson principle. 

6. The basis of this principle is the use of a set of 20 (or more, if 
desired) mixed alphabets arranged in a sequence that can readily be 
changed; these can be used in the encipherment of a whole set of 20 
letters with one and the same displacement of the alphabets. Suc- 
cessive encipherments are accomplished with different displacements 
of the alphabets. 

c. Whereas Jefferson contemplated a device using a total of 36 
different alphabets mounted on revolvable disks, the one Bazeries 
described used only 20 alphabets mounted in the same manner. 

S. Army cipher device, type M-84. — Tfaur c ryp t ograph ■ 
i s bas ed upon the Jeffers o n principle, usi ng 26 mixod - a l p h abctn on ■ 



o iphor disks. I n- the foll o wing section t h e latest 1 description e f-^h c 



d — -Hi h i TTi i 1 fur ja-tbe nr f i h l* Basie 

l Mold M a nual, Vuluffl B"f¥; 

r J ^ = % 



1 



jljOhn M. Manly, Ph. D., formerly Captain, Military Intelligence Division, 
U. S. A., discovered, in 1922, a description of the device among Jefferson’s Papers 



in the Library of Congress (vol. 232, item 41575, Jefferson’s Papers). Fin. a. blLo+ti- 

jL My 1 q 



' mm: 
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llA^ Section XIII 

X u - s - ARMY CIPHER DEVICE, TYPE M-94 

Paragraph 

PSTpuae auiftmlrflrolluii. r:. - - - -- — v . _ - , — - ■ _ ■ 63 

General description 64 

Necessity for key and providing for changes therein 65 

Detailed instructions for setting the device to a predetermined key 6f> 

Cryptographing a message 67 

Cryptographing abbreviations, punctuation signs, and numbers 68 

Decryptographing a message 69 

— 6ipl>OT dovio e , typ g- M 94 ,ia » 

cryptographic jjwfhimnnt tlm t is uf uqujj j wfrnt irmii a ^ fc y . th e 

i i d- ri i I r p » V^r < nil mnasmpm nasrfara ao firm mhftps 

lor seci^t^oimnumca^fl»r^It is also ajpitem of posspareSv 

.by^affnaval unijs-alia stations, inpkf^m^ho^p^Tthe MtpfotfEorps, 
af*<i canBo>«f^loyed in cer%i?'classes o^-^Qret interc<priShimc§,tion 
bewjyw'Tne Army and tjbe'N av^wj>elfspectfk; amvrfgementsthere- 
feriThaVe been madedSy the appmfmate commanders. 

64. General description. — a. The device is made of aluminum 
alloy and consists of the following parts: 

(1) A central shaft, the left end of which terminates with a project- 
ing shoulder, the right end of which is threaded ; 

(2) A set of 25 alphabet disks, on the rim of each of which there is 
stamped a different, completely disarranged alphabet ; 

(3) A guide-rule disk, consisting of a blank or unlettered-disk from 
which there projects a guide rule; 

(4) A retaining plate, consisting of a thin disk upon one surface of 
which are stamped the name and type number of the device; 

(5) A knurled thumb nut. 

b. Each disk has a hole at the center suitable for mounting it upon 
the central shaft, upon which the disk can be revolved forward or 
backward. The left face of each alphabet disk is provided with a 
circle of 26 equidistant slots; the right face is cupped, and carries at 
one point on the inside rim of this cup a small projecting lug. The 
guide-rule disk also carries such a lug. When the disks are assembled 
upon the shaft, the lug on each disk engages with one of the slots on 
the adjacent disk on the right and thus the disks can be held in engage- 
ment in any desired relative positions by screwing down the knurled 
thumb nut against the retaining plate, which is inserted between the 
last alphabet disk and the nut. 

c. When the thumb nut and the retaining plate are removed and the 
alphabet disks are taken off the shaft, it will be noted that each al- 
phabet is stamped on its inside or cup surface with an indentifying 
symbol consisting of a number that is above the central hole and a 
letter that is below it. The numbers run from 1 to 25, inclusive, the 
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letters from B to Z, inclusive. These symbols are employed to 
designate the sequence in which the alphabet disks are to be assem- 
bled upon the shaft in cryptographing or decryptographing messages, 
as described in paragraph 66. Either symbol may be used for this 
purpose (as prearranged) but for the present only the numerical 
identifying symbols will be so used. 

65. Necessity for key and providing for changes therein. — a. 
Messages cryptographed by the same sequence of alphabet disks can 
remain secure against solution by a well-organized and efficient enemy 
cryptanalytic section for only a relatively short time. It is impossible 
to state exactly how long, because solution depends upon a number 
of variable factors; a conservative estimate would place the minimum 
at six hours, the maximum at two or three days. For this reason it 
is necessary to change the sequence from time to time, and the method 
for determining or indicating the new sequence must be agreed upon 
in advance and thoroughly understood by all who are to use the 
instrument. 

b. The sequence in which the alphabet disks are assembled upon the 
shaft constitutes the key in this cipher system. When a change in 
key is to take place, exactly what the new key will be and the exact 
moment that it is to supersede the old key. will be determined by the 
proper commander and will be co mmuni cated in signal operation 
instructions. 

66. Detailed instructions for setting the device to a pre- 
determined key. — a. The method prescribed herein is based upon 
a keyword or keyphrase from which the sequence of numbers constitut- 
ing the key for assembling the alphabet disks can be obtained by 
following a simple, standardized procedure. The reason for employ- 
ing such a procedure is that it makes it possible to derive, at will, a 
relatively long sequence of numbers (which would be difficult to 
remember) from a word or phrase (which is easy to remember) and 
thus eliminates the necessity of canning the key in written form upon 
the person. It is this basic keyword or keyphrase which is communi- 
cated throughout the command in signal operation instructions. The 
exact method of deriving the numerical key sequence from the key- 
word or keyphrase is given step by step in b below. 

b. Assume that the key phrase so communicated is CHINESE 
LAUNDRY. The following are the detailed steps to be followed in 
deriving the numerical key sequence: 

(1) A set of rows of cross-section squares, 25 squares in each row, is 
prepared. (Prepared sheets of }{- inch squares are suitable.) 
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(2) In the top row the series of numbers 1, 2, 3, ... 25 are 
inserted. Thus: 




(3) Beginning under the number 1, the successive letters of the key 
phrase are written in the second row of squares, under the successive 
numbers. Thus: 



1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 


— 

21 


2 


3 


24 


25 


c 


H 


I 


N 


G 


S 


E 


L 


A 


U 


N 


D 


R 


Y 
















■ 


■ 














































■ 


■ 


1 







(4) The keyphrase is extended by repetition until there is a letter 
under the number 25, making a key sequence of 25 letters. 1 Thus: 



1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 


21 


22 


23 


1 




C 


H 


I 


N 


E 


S 


E 


□ 


A 


U 


N 


D 


R 


Y 


C 


H 


1 


N 


E 


S 


E 


L 


A 


U 


s 
















■ 


































■ 



(5) The letters of the key sequence are now to be numbered serially 
from left to right in accordance with the relative position that each 
letter occupies in the ordinary alphabet. Since the letter A comes 
first in the ordinary alphabet, and since this letter occurs twice in the 
illustrative key sequence, the number 1 is written under the first 
appearance of A in this sequence, and the number 2 is written under 
its second appearance. Thus: 



1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 


21 


22 


23 


24 


25 


c 


H 


I 


N 


E 


S 


E 


L 


A 


U 


N 


D 


R 


Y 


C 


H 


I 


N 


E 


S 


E 


L 


A 


U 


N 


















1 




























2 







(6) The next letter in the ordinary alphabet is B. The key sequence 
is carefully examined to see if it contains the letter B. Since this letter 
does not appear in the illustrative key sequence, the latter is examined 
to see if it contains the letter C. This letter occurs twice in the 

1 If the key consists of a word or phrase containing more than 25 letters, those 
after the 25th letter are merely omitted. 
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illustrative key sequence and the first C, therefore, is assigned the 
number 3, the second C the number 4. Thus: 




(7) The next letter in the ordinary alphabet is D, which, being 
present in the key sequence, is assigned the next number, and so on. 
Thus, the process is continued until each letter has been assigned a 
number. The work must be done carefully so as not to overlook a 
single letter. If an error is made in the early stages of the work, it 
necessitates starting afresh. The operator should be especially careful 
with the letters which immediately follow one another in the ordinary 
alphabet but axe present in the key sequence in reversed order, such as 
ED, FE, ON, and so on. It is easy to make a mistake in such cases 
and to assign these letters numbers in a sequence that is the reverse 
of what it should be. 

(8) When the numbering process has been completed and if the 
work has been correctly performed, it will be found that every letter 
of the key sequence has a number under it, and that the greatest 
number that appears is 25. If this is not the case, it is an immediate 
signal that an error has been made. It cannot, however, be assumed 
that so long as every letter has a number under it, with the greatest 
number 25, this is immediate and conclusive proof of accuracy in the 
work. The operator should invariably check his work; better yet, if 
two clerks are available each one should derive the numerical key 
independently and the final results should be checked by comparison. 

(9) The keyphrase selected as an example in the foregoing descrip- 
tion yields the following numerical key: 



(10) It is this sequence of numbers which indicates the order in 
which the successive alphabet disks are to be assembled upon the 
shaft from left to right. Thus, according to the foregoing key sequence, 
alphabet disk No. 3 comes first, that is immediately to the right of 
the guide-rule disk; alphabet disk No. 10 comes next, and so on. 
Alphabet disk No. 19 is the last in this particular key, and after it 
has been placed on the shaft, the retaining plate and thumb nut are 
added and the latter screwed down a distance sufficient to keep the 
assembly together and yet permit of revolving individual disks freely 
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upon the shaft. The instrument is now ready for use in either crypto- 
graphing or decryptographing messages. 

67. Cryptographing a message. — Suppose the following message 
is to be enciphered with the key derived in paragraph 66: 

CO 3D INF 

HAVE JUST REACHED EASTERN EDGE OF WOODS ALONG 
552-592 ROAD. WILL REMAIN IN OBSERVATION. 

CO 2D BN 

a. The message is written down on the work sheet underneath the 
key in lines of 25 letters each. Space is left under each line for the 
insertion of cipher letters. (For procedure in connection with abbre- 
viations and numbers appearing in the text of messages, see par. 68.) 
Thus: 




b. By revolving the disks upon the shaft, one by one, the first 25 
letters of the message are aligned to form a continuous horizontal row 
of letters reading from left to right along the outside of the cylinder. 
The guide-rule will be found very convenient in marking the row upon 
which the letters are being aligned, thus relieving the eyes of unneces- 
sary strain and reducing the chance of making errors. After all 25 
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letters have been aligned, the assembly is locked in position so that 
no disk can become displaced accidentally in further manipulation of 
the cylinder. The row of letters is immediately checked to make sure that 
no displacement has occurred among the first few disks while manipulating 
the last few. 

c. The outside of the cylinder now presents a series of 26 rows of 
letters, of which 24 rows are fully visible, the other two being hidden 
or partially obscured by the guide-rule. One of the 24 visible rows is 
the plain-text row that has just been set up, and the other 23 rows are 
cipher-text rows any one of which may he selected to represent the plain- 
text row. One of these cipher-text rows is selected at random and the 
letters composing this row are written underneath the row of plain- 
text letters on the work sheet. Thus, supposing the row beginning 
LYEUJ . . . , has been selected, the first cipher line will read as 
follows: 



i 
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B 


10 


11 


12 


13 


14 
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17 


18 


19 


20 


21 
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23 


24 


25 
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i 


5 


U 


N 


D 
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Y 


G 
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I 


N 


E 


S 


E 
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N 
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10 


EE 


EE 


S 


31 


B 


EE 


D 


23 


17 


5 


20 


25 


4 


11 


13 


18 


8 


22 


9 


15 


2 


24 


I 


c 


0 


¥ 
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II 


I 


Ji 


N 


F 


H 


A 


V 


E 


J 


U 


S 


T 


R 


E 


A 


C 


H 


E 


D 


B 


Q 


□ 


□ 


D 
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B 


B 


Y 


P 


Q 


B 
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Y 


N 


E 


C 


N 


H 


P 


F 


A 


B 


P 


G 



It is not necessary to make any record on the work sheet as to which 
cipher-text row (above or below the plain-text row) was selected, nor 
is it necessary to indicate it in any manner whatever in the cipher 
message. 

d. The thumb nut is loosened, but nqt removed from the shaft. 
The next 25 letters of the message are aligned, the thumb nut screwed 
down against the retaining plate, the letters in the alignment are 
checked, and again any one of the 23 visible cipher-text rows, except 
the one used to encipher the first line, is selected at random for the 
cipher text. The letters in the row selected are written down under 
the second line of plain-text letters on the work sheet. Thus, sup- 
posing the row beginning KZBYJ . . . , was selected, the work sheet 
now appears as follows: 
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□ 
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4 


11 
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18 
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H 


g 


E3 
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□ 


N 
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A 
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El 
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E 
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□ 




□ 


D 


□ 
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Y 
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ES 


B 
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G 
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□ 


□ 


B 




I 


* 


Z 


B 


Y 


J 


0 


□ 


El 


N 


S 


R 


A 


N 


D 


J 


u 


E 


□ 


0 


B 


B 


B 


B 




i 



e. This process is continued in similar manner with the third and 
fourth lines of the plain-text message. It should never be made a 
practice to “favor”, that is, frequently to select a particular cipher-text 
row above or below the plain-text row. As irregular a selection as 
possible should be made, and the selection of the cipher-text row 
immediately above the plain-text row or immediately below the lower 
edge of the guide rule should be avoided. Supposing these instruc- 
tions to have been followed and that there has been selected for the 
the cipher-text row representing the third plain-text line of the mes- 
sage the row beginning RAMTF . . . , and for that representing the 
fourth line, the one beginning PJNSY . . . , the message now stands 
as follows: ■ 
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/. There are left only 11 letters to be enciphered, not enough to 
make a complete row of 25 letters. This, however, makes no differ- 
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ence in procedure; these 11 letters are merely aligned and a cipher- 
text row is selected to represent them. Supposing the row beginning 
URZGH . . . , is selected, the message now stands as follows: 
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g. The cipher text is now to be copied on the message form in 
5-letter groups. It is as follows: 

LYEUJ DJNYP QBFYN ECNHP FAGPG 
KZBYJ IAHNS RANDJ MEFSY RITSN 
RAMTF OMOKE NCSHC SPMXH TEXGM 
PJNSY VAWUC HYFHE YTBGP YKGMG 
URZGH EJQSM D 

h. The last group of the cipher message is, however, not a complete 
group of 6 letters. It is made so by adding four X's. These are not 
to be cryptographed; they are added merely to complete the last cipher 
group. The final message becomes as shown below: 

LYEUJ DJNYP QBFYN ECNHP FAGPG 
KZBYJ IAHNS RANDJ MEFSY RITSN 
RAMTF OMOKE NCSHC SPMXH TEXGM 
PJNSY VAWUC HYFHE YTBGP YKGMG 
URZGH EJQSM DXXXX 
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The message as it now reads is but one of many different forms in 
which this same message could appear externally, depending on 
exactly which of the available cipher-text rows is selected for each 
line of the encipherment. 

68. Cryptographing abbreviations, punctuation signs, and 
numbers. — a. Authorized abbreviations appearing in the origi- 
nal plain-text message may be enciphered as abbreviations with- 
out periods. Examples: Am Tn=AMTN; E. V. Brown Sch= 
EYBROWNSCH. 

b. Normally, the writer of a message spells out the punctuation 
signs he wishes transmitted, as, for example, STOP, COMMA, 
COLON, etc. If a message contains punctuation signs not so spelled 
out, the message-center chief must indicate whether they are to be 
omitted or spelled out and transmitted. 

c. Cardinal and ordinal numbers when spelled out in letters in the 
original plain-text message are always enciphered exactly as spelled. 

d. Cardinal numbers when expressed in figures in the original 
plain-text message must always be spelled out, digit by digit, in 
cryptographing. Examples: 

4= FOUR 

40=FOURZERO (and not FORTY) 

400=FOUR ZERO ZERO (and not FOUR HUNDRED) 
455 = FOURFI VEFIVE 

450.7-758.8=FOURFIYEZEROPOINTSEVENDASHSEVEN- 
FIVEEIGHTPOINTEIGHT 
2005 = TWOZEROZEROFIVE 

12:01 a. m.=ONETWOZEROONEAM 

5:15 p. m . = FIVEONEFI VEPM 

e. Ordinal numbers above the ordinal number 10th, when expressed 
in figures followed by “d” or “th”, are cryptographed merely as 
digits spelled out, without adding the “d” or “th.” The omission 
of the “d” or the “th” will cause no confusion or ambiguity. Ex- 
amples: 3d Bn=THIRDBN; 7th Pack Tn=SEVENTHPACKTN; 
11th Regt = ONEONEREGT ; 403d Am Tn = FOURZEROTHREE- 
AMTN. 

69. Decryptographing a message. — a. Knowing the keyword or 
keyphrase, the numerical key is developed as described under para- 
graph 66, and the set of alphabet disks is assembled accordingly. 
The message to be decryptographed is written down in lines of 25 
letters, on cross-section paper, if available, space being left under 
each line for the insertion of plain-text letters. Using the cipher 
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message given under paragraph 67 h, it appears under the key in the 
following form: 




b. The first 25 letters of the cryptogram are set up on the device, 
the letters being aligned in a row from left to right, just above the 
guide-rule. Fixing the disks in this position by screwing down the 
thumb nut, the whole cylinder is turned slowly, forward or backward, 
and each row of letters is carefully examined. One of these rows 
and only one will read intelligibly all the way across from left to right. 
That is the row which gives the plain text for the first 25 cipher 
letters. These letters are inserted in their proper place on the work 
sheet, giving the following: 
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c. The thumb nut ia then loosened, the next 25 cipher letters are 
set up, the assembly is locked into position, again the whole cylinder 
is slowly revolved, and the plain-text row of letters found. These 
are written down in their proper place and the process is continued 
with the rest of the cipher letters until the message has been com- 
pletely decryptographed. 

d. In the case of a cryptogram the last few letters of which do not 
form a complete set of 25, if any difficulty is experienced in picking 
out the plain-text row, the context of the preceding part of the mes- 
sage should give a good clue. In the case of the illustrative message 
above, it should be realized that the last four letters of the cryptogram 
are not to be decryptographed, since they were merely added after 
cryptographing to make the last group of the cryptogram a complete 
group of five letters. They are omitted from the work sheet. 

e. The plain-text message is then copied on a message form. The 
code clerk may, if authorized to do so by the message-center chief, 
convert numbers, which had to be spelled out in letters to permit of 
their cryptographing, into their equivalent Arabic figures. Abbrevi- 
ations, and punctuation signs are, however, copied exactly as they 
stand in the decryptographed message. 

70. Precaution . — When in danger of capture, the alphabet disks of a 
device that has recently been used to cryptograph or decryptograph a 
message must be taken off, thoroughly disarranged, and reassembled. 

Section XIV 
CIPHER MACHINES 

Paragraph 



Transposition-cipher machines 71 

Substitution-cipher machines 72 

Machines affording only monoalphabetic substitution 73 

Machines affording polyalphabetic substitution 74 

^ Bisadvantagoo of a i phnr machines , 75 



71. Transposition-cipher machines. — These are rarely encoun- 
tered; the files of United States patents disclose but one example and 
so far as is known no actual machine has been constructed conforming 
to the specifications covered therein. It may be said that substitu- 
tion methods lend themselves so much more readily to automatic 
encipherment than do transposition methods that the possibilities for 
the construction of cipher machines for effecting transposition are 
almost completely overlooked. Basically it would seem that a ma- 
chine for effecting transposition would have to include some means for 
“storing up" the letters until all the plain text has been “fed into 
the machine”, whereupon the transposing process is begun and the 
letters are finally brought out in what externally appears to be a 
randomized order. It is conceivable that a machine might be devised 
in which the disarrangement of the letters is a function merely of the 
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number of letters comprising the message; daily changes in the ran- 
domizing machinery could be provided for by resetting the elements 
controlling the process. 

7$. Substitution-cipher machines. — a. The substitution prin- 
ciple lends itself very readily to the construction of machines for 
effecting it. The cryptographs described in the preceding two sec- 
tions, as Well as the simpler varieties making use merely of two or 
more superimposed, concentric disks, are in the nature of hand- 
operated substitution-cipher mechanisms that are difficult to use, 
cannot be employed for rapid or automatic cryptographic manipula- 
tions, and arexjuite markedly susceptible to errors hi their operation. 
For a long timeYhese defects have been recognized rind inventors have 
striven to p roduce and to perfect devices more/automatic in their 
functiomng ^Th e WooM B t hat hai r attondod th e ir efforta cannot fee 

nairl ti l i'l | t - ■■■ r f-y Uni — \r\A- r; 4 rlj-nl , "'~ f i g 

•j'l ; j l frteuW" *? — tbrVt J 'm r-*~r Irv— as a rule, realized the 

complexity of the problems confronting tifem, nor have they ap- 
proached the problemWrith the necessary thorough knowledge ofx"' 
botit practical cryptography, with its ntfany limitations, and theo- 
retical^cryptanalysis, wiro its wide possibilities for the exercise of 
human ingenuity. Bmh aw th e d^ y /will - iiuiim^ However, when the 
problem w al l bc^ attacked by competent, large, and skilled staffs of 
experts, nighly efficient cipher machines -w5t be 

developed andv^acthaSyhs Wedfor practical secret communication. 

b. It is obvious that automatic devices of this nature must be 
equipped with a keyboard or some kind, resembling or duplicating 
that of the ordinary typewriter. \ Furthermore, for rapid manipula- 
tion these machines must We actuated by mechanisms affording speed 
in operation, such as electric or spring motors, compressed air, electro- 
magnets, etc. 

73. Machines affording only znoAnalphabetic substitution.- 

Little need be said>of those machines m which the ordinary keys of 
the keyboard are inerely covered with removable caps bearing other 
letters or characters. They yield only the simplest type of substi- 
tution known and have little to recommend them. Even when the 
mechanism isr such that a whole series of alphabets can be brought 
into play, p the encipherment is monoalplmbetic for a succession 
of 20 or n?ore letters before the alphabet changes, the degree of cryp- 
tograph^ security is relatively low, especially ifVbe various alphabets 
are interrelated as a result of their derivation fr<hja a limited number 
of January components. 

Machines affording polyalphabetic substitution. — a. In 
£cen^ years there have been placed upon the commercial market 
jaay cipher machines of more than ordinary interest but they can- 
not be described here in detail. In some of them the number of 
secondary alphabets is quite limited, but the method of their employ- 
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ment or rather the maimer in which the mechanism operates ta 
bring them into play is so ingenious that the solution of cryptographs 
prepare&sby means of the machine is exceedingly difficult. This 
point should be clearly recognized and understood; other things 
being equal/vthe manner of shifting alphabets contributes i ito 
cryptographic 'security than does the number of alphabets involved 
or their type. jFor example, it is quite possible to employ 26 direct 
standard alphabets in such a way as to yield greater security than is 
afforded by the ube of 100 or more mixed alphabets Wan easily 
analyzable method\ The importance of this point h a s no fr b & n - 
recognized by inventors. / 

b. One of the serious limitations upon the development of good 
machines is that the munber of letters in our alphabet, 26, does not 
lend itself well to mechanical manipulation becaus/ it has but the 
factors 1, 2, and 13; nor isSit a perfect square. If /he alphabet con- 
sisted of 25, 27, or 36 characters, much more comd be done. The 
addition of figures or symbols to the 26-letter Alphabet introduces 
the serious practical difficulty, that the cryptograms will contain 
characters other than letters and the cost c n transmitting inter- 
mixtures of letters, figures, and symbols is prohibitive. Subterfuges 
of one sort or another, employe®, to circumvent this difficulty, are 
usually impractical and expensiveA / 

c. The principles underlying the variou/ma^hines which have thus 
far been developed are so diverse that mo description of them can 



here be undertaken^' y 

76. Disadvantages of cipher xWqhines. — In addition tq the 
fact that until very recently the qiypWrraplpc security,^ ^cipher 
machines was not very great, there a^Pwexmore 
c umstanec o wffioh nfflitat e - agma^tne^^. oF cipher apparatus for 
commercial or governmental usage. \ 

a. The first is that cipher ycannot compete with code from the 
point of view of condensation or abbreviations A cipher message 
is always at least as long as'the original plain-teM, message, whereas 
a code message is usually inuch shorter than the equivalent original 
plain-text message ; this arises from the fact that invwell-constructed 
codebooks a single grWp of five (or sometimes less) 'characters may 
represent a long phrase or even a whole sentence. \ 

b. The second important disadvantage of cipher machines lies in 
the machines themselves. (^Cipher machines are expense $jhey are 
delicate mechanisms that require frequent servicing, andtney c ann ot 

be readily transported.^Often they require electric current for fro- 
operation, thtf availability of which is sometimes in question. \ If the 
mechanism .is at all complicated to set up for enciphering or decipher- 
ing, emnyare easy to make and call for oostlv exchanges of messages 
relative/to their correction. A ^ jLcJWi 

. ji»555”— 35 7 . , ■ . . . AA ft , 

2..' 3^-e- 6 |- Qji f . 1 ' -A—. l) J, K* ? - / V . S' <- U A ~ C- T ■ 

■ -vv.J A ©•*■ I ’*« 

hOtA-tK. urC. . i, vv -+-‘j vVf' 1 ,aW)-«*>ua & 4 _ 
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Intermixtures of code text and "t 1 — 

76. Preliminary remarks .=^Sections XIV to XVII, 

Text No. 165, were devoted to a general consideration of code systems 
and enciphered code. It was there indicated that code systems are 
systems of substitution where the elements of the substitutive 
process, comprising letters, syllables, words, phrases, and sentences, 
are so numerous that it is impossible to memorize them or to re- 
construct them at will when necessary, so that printed books con- 
taining these elements and their code equivalents must be at hand 
in order to cryptograph or d,ecryptograph messages. The various 
types of code groups were indicated, together with methods for their 
construction by means of permutation tables. One-part and two- 
part codes were briefly discussed. Finally, a few words were added 
with a view merely to indicating various types of enciphering code 
for greater cryptographic security. 

~%sr. International and domestic regulations governing con- 
struction of code groups. — a. Rules for the construction of code 
groups and the general composition^®! code and cipher telegrams of 
international traffic are drawn up from tipie to time byTptemational 
Communications Conferences to which delegates are sent by all 
governments adhering to the International Telecommunication 
Convention. 1 



1 The International Telecommunication Convention is the official title of the 
single document resulting from the amalgamation of the International Telegraph 
Convention of St. Petersburg, 1875, and the International Radiotelegraph 
Convention of Washington, 1927. This amalgamation was accomplished in 
1932 by the International Telegraph and Radiotelegraph Conferences acting 
jointly at Madrid. The Convention is accompanied by separate sets of Regu- 
lations, as follows: 

(1) General Radio Regulations. 

(2) Additional Radio Regulations. 

(3) Telegraph Regulations. 

(4) Telephone Regulations. 

In order to become a signatory or adherent to the Telecommunication Conven- 
tion, it is necessary to sign or adhere to at least one of the regulations. The 
United States is signatory to only the following documents established by the 
Madrid Conference in 1932: 

(1) The International Telecommunication Convention. 

(2) The General Radio Regulations. 

The United States is not a signatory to the Additional Radio Regulations, the 
Telegraph Regulations, or the Telephone Regulations. 
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b. Even though the United States is not a signatory to the Tele- 
graph Regulations, the latter nevertheless directly affect our inter- 
national telegraph, cable, and radio relations. The following is a 
r6sum6 of the Telegraph Regulations adopted by the last conference. 
It should be carefully studied by all students interested in the prac- 
tical aspects of modem cryptography: 

OUTLINE OF THE REGULATIONS APPLICABLE TO CODE AND 
CIPHER MESSAGES, AS GIVEN IN THE TELEGRAPH REGULA- 
| V TIONS ADOPTED BY THE INTERNATIONAL TELECOMMUNICA- 

TION CONFERENCE, MADRID, 1932 

The following outline of the regulations governing code and cipher messages 
k.> in international practice will succinctly show the most important features: 

Principal features 

1. Requirements and conditions: 

(a) Maximum length of word — 15 
letters. 

(b) Must present intelligible 
meaning; each word and 
expression must have mean- 
ing normally attributed to 
it in language to which it 
belongs. 

(c) Telegrams of this class must 
be wholly in plain language 
but presence of bona fide 
commercial marks or com- 
mercial abbreviations in 
current use, registered ad- 
dresses, or check words in 
banking telegrams per- 
mitted. 

(d) Unions of plain-language 
words specifically pro- 
hibited. 

2. Tariff at rate of 15 letters per word. 
Commercial marks are counted 
at the rate of 5 characters to the 
word. 



I 



Types of languages 



I. Plain language is that which pre- 
sents an intelligible meaning in one or 
more of the languages authorized for 
international telegraph correspondence, 
each word and each expression having 
the meaning which is normally attri- 
buted to it in the language to which it 
belongs. 
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II. Secret language is classified into code 



A. Code language is that which is 
composed of (a) artificial words; or (b) 
bona fide words not having the meaning 
normally attributed to them in the 
language to which they belong and 
accordingly not forming comprehen- 
sible phrases in one or more of the 
languages authorized for telegraphic 
correspondence in plain language; or 
(c) a mixture of bona fide words thus 
defined and artificial words. 



Requirements and conditions: 

(a) Maximum length of word — 5 
letters. 

(b) No conditions or restrictions 
as to construction of words, 
except that they cannot 
contain the accented letters 
a, &, &, 6, fi, d, ii, and the 
combinations ae, aa, ao, oe, 
ue, and ch are each counted 
as two letters. 

(c) The clerk who accepts a tele- 
gram in code language must 
write the service indication 
“CDE” on the blank. 

This is transmitted to des- 
tination at the beginning 
of the preamble; CDE is 
not charged for, Caj* - 1 > - 

(d) Union of plain-langui&6 Woods' 
specifically prohibited. 

(e) Mixture of plain and code 
language and/or figures and 
groups of figures permitted. 
However, the number of 
figures or groups of figures 
must not exceed one half , 
the number of chargeable 
words in text and signature. 

The sender of telegram con- 
taining code language 'must 
produce code book if the 
office of origin requests it. 

2. Tariff at the rate of 5 letters per 
word, charged for at six-tenth’s 
full rate in extra-European system 
and at seven-tenth’s full rate in 
European system. 1 A minimum 
charge as for 5 words com- 
pulsorily collected. Plain lan- 
guage words inserted in code 
text, counted at rate of 5 letters 
per word. 



language and cipher language. 

1 . 



i Telegrams from the United States to all other countries except Canada and Mexico belong to the 
extra-European system. 
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B. Cipher language is that which 
consists of (a) Arabic figures, groups, 
or series of Arabic figures having a 
secret meaning; or (b) words, names, 
expressions or combinations of letters 
not fulfilling the conditions of plain 
language or code language. 



1. Requirements and conditions: 

(a) No fixed maximum length of 

word or group. 

(b) No conditions or restrictions 

as to construction of groups, 
except that the mixture, 
within the same group, of 
letters and figures is pro- 
hibited. 

(c) Mixture of plain and cipher- 

language words permitted. 

(d) Unions of plain - language 

words specifically prohib- 
ited. 

2. Tariff at rate of 5 figures or letters 

per word, charged for at full rate. 
Plain-language words inserted in 
cipher text counted at rate of 15 
letters per word. 



No charge is made for words in the address and signature in all telegrams. 9 

c. The foregoing rules do not apply to domestic telegrams within 
the United States. Here the rules are that code words (bona fide 
words, including authorized compound words) taken from the 
English, French, German, Spanish, Italian, Dutch, Portuguese, or 
Latin dictionaries count as single words regardless of their length; 
all other kinds of groups of letters, whether pronounceable or not, 
are counted at the rate of 5 letters per word; figures are counted of 
the rate of 1 word per figure. In domestic practice code may be 
used in the deferred services (such as day letters and night letters), 
but not in international practice. 

d. International telegraph regulations, insofar as they do not con- 
flict with the provisions of the International Radiotelegraph Regu- 
lations apply with equal force to international radiotelegrams. In 
particular, these apply to the matter of types of languages, word 
coun t, method of counting words in address and signature, etc. 

TO.^^termixturesofx code test and cipher text»^-o. It'often 
5pens corp ^poBd^irt» empfcy a^6oda whieh 'makes^no Wp/) 
vision i or encoding proper names ot unusual Words not mcludeain 

‘Address and signature are transmitted bee of charge in domestic telegrams within the United States, 
bat In cablegrams and International radiograms these are invariably counted and charged for in determin- 
ing the cost of transmission. This gives occasion to the practice of employing registered code addresses, 
which, In a single word, Indicate the name and street address of the addressee. The city (State and county, 
if necessary) Is added to the code address and is included In the word count. The charge for registering 
a code address Is $2.50 per year, per code address. This is paid to the local telegraph company, with whom 
the code address must be registered. A publication listing registered code addresses of the most important 
commercial firms in the world is privately published under the title: “International Register of Telegraphic 
and Trade Addresses." 
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‘ the vocabulary of the codebook. Rather than leave the unencodable 
text in plain language in the message, since its ap-pearance will surely 
rj lead to clues to unauthorized reading oj the message, the correspondents 
encipher such words and proper names by means of any prearranged 
'j cipher system. Also, in some cases, when the code is limited in its 

-£ vocabulary and the various inflections of words are not represented, , 

^ the correspondents may suffix the proper inflections (“ed”, “mg”, 

\ “tion”, etc.) in cipher. This procedure, however, is not to be 
- ^^recommended, because it considerably reduces the cryptographic 
^ insecurity of the whole system. 

. ’ ' ff, Sometimes correspondents make use of two or more codes 

1 » > within the same message. This is occasionally the case when they 

n J S 1116 makhl Z 1186 a S enera l or commercial code which does not have 
*i £ • all the special expressions necessary for their business, the latter 
expressions being contained in a small private code. Sometimes, 
j | i however, the intermixture of code text from several codes is done 
*(^4f° r the purposes of secrecy, though it is, as a rule, a rather poor 
fsubterfuge. 

-Section XYt 

5 BSfGffiSEREIl .CODE 

I Kh #w Paragraph 

j Pwposeo o ^ enciphered code - _. . J ....... ..... --WTO 







enciphered code. — o. The purposes of encipher- 
ing code have already been explained in. the previous text, together 
with brief indications of methods. The superimposition of a, g ood 



! cipher system upon the code text of a message is todajr^eusafest 
l and most practical of all. methods of cryptography for governmental 
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kinds of 




Monoalphabetic methods. — It is, of course, easy to draw up 6'^/" 
4* single-mixed alphabet^ » When the codebook is in possession of 
the enemy cryptanalysts and the ori ginal code words are therefore 
at hand, this method does not yield A Ja«©i security, for reasons not 
necessary here to indicate. Even when the actual codebook is not 
known, but it is known that it is one of a set of commercial codes 
of the 2-letter difference type, the reconstruction of the cipher 
alphabetVis not difficult. 

Polyalphabetic methods.— V A very simple polyalphabetic 
method is to have 5 alphabets which are used in succession; or 
there may be a series of sets of 5 alphabets, the individual set to be 
used being determined by indicators inserted in the message itself. 

Any sort of polyalphabetic method may be used. For example, 
tne repeating key method, the r unnin g or continuous key method, 
the interrupted key method, etc., can be applied. Digraphic methods . 5 
may also be used} 

Tables of various sorts are often employed. For example, using 
a table applicable to code groups of 5 figures, a table giving pro- 
nounceable combinations of letters for the combinations of digits 
may result in converting a group such as 75152 into the letter group 
KOBAL. Tables for substituting combinations of letters into other 
combinations of letters are, of course, equally feasible. The sub- 
stitution may be strictly digraphic, combining two 5-letter or 5-figure 
groups into a series of 10 digraphs; or it may be a combination of 
trigraphic and digraphic substitution, each 5-character group being 
split up into a 3-character and a 2-character combination. Other 
combinations are, of course, also possible. 

In all the foregoing methods the chief objection is that the 
advantage of the 2-letter differential feature is more or less dissi- 
pated by the encipherment, but this is true of every substitutive 
method that is superimposed on code. 

I §) The disadvantage referred to in the preceding subparagraph is 
absent in those cases on which the encipherment operates merely to 
substitute other code groups of the same book for the message code 
groups. The most common methods of this type make use of the 
figure-code groups, the latter being manipulated in various ways to 
change them and the resulting groups then being given their letter- 
code equivalents. Some of these methods are explained below. 

• n rf*TT rTrrvnT,ir,nl J ttin n rl rlitinM *«■ ■ ril gaffirf TH11T U '"' tth 
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d. Keyed additive systems are also used. For example, the addi- 
tive corresponding to the keyword BAD might be (by agreement) 
200, 100, 400. These would be used in repetitive fashion. Or, it 
might be agreed to use the numbers additively and subtractively 
alternately; +200, —100, +400, —200, +100, —400, +200, etc. 

88. Miscellaneous methods. — a. Among various more complex 
methods, mathematical manipulation of code numbers by complex 
methods suggests itself. For example, the addition of a long series 
of digits to the digits of the code groups, and the conversion of the 
sums into letter-code groups is possible. Thus, suppose the code 
groups (and their numerical equivalents) of a message are as follows: 

CAB0R NIX0T ARCIP Y0KRA 
18541 42107 09851 83572 

Suppose the sequence of digits 432809721is used as an additive: 

18541 42107 09851 83572 . . . 

43280 97214 32809 72145 . . . 

61821 139321 42660 155715 

Two of the totals obtained in this example are greater than the total 
number of groups contained in the code, which, let us assume in this 
case, is 100,000. The totals which exceed this number are therefore 
merely decreased by 100,000 and the final result is: 

61821 39321 42660 55715 

The code groups corresponding to these numbers are now sought in 
the codebook itself and these letter-code groups form the final mes- 
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sage. The numbers resulting from addition or subtraction of key- 
numbers may, however, be sought in another and different-numbered 
code and the code groups corresponding to the' keyed code numbers 
transmitted. 

b. The use of a numbered code lends itself readily to columnar 
transposition methods. The code numbers are written in a rectangle, 
keyed columnar transposition applied, the code groups resulting 
from this process reconverted into letter groups, and the latter trans- 
mitted. This is only possible, however, where the codebook contains 
exactly 10,000 groups, and, of course, the process of encipherment 
and decipherment requires care and time in order to avoid errors. 

c. Fractionation methods and cipher squares (of the 1-part, 2-part, 
or 4-part type, using pairs of digits from 00 to 99) can be readily used 
with numbered codes. They would yield enciphered code messages 
of great security. 

d. Very occasionally cipher machines or hand-operated crypto- 
graphs are used to encipher code. 
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THE SIGNAL INTELLIGENCE SERVICE* 

Paragraphs 
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XVIII. Specific functions of the Signal Intelligence Service 87- 93 
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Section XVII 

GENERAL INFORMATION 



Paragraph 

Definition 84 

Basic authority 85 

Relations with the General Staff - 86 



84. Definition. — a. Up to this point the student has been con- 
cerned principally with theoretical considerations in the preparation 
and proper manipulation of various types of codes and ciphers. In 
Special Text No. 165 (1935), brief mention was made of the way in 
which cryptographic work in the Army is allocated to different 
agencies of the military establishment. It was there noted that most 
of the activities connected with this work are functions of the Signal 
Corps. This part of the present text is devoted to a more detailed 
exposition of the allocation mentioned, so fax as concerns the Signal 
Corps. 

b. The Signal Corps personnel assigned to fulfill the Signal Corps 
functions connected with cryptography are organized into units of a 
special service, called the Signal Intelligence Service, which may be 
defined as an operating service concerned with (1) the preparation, 
publication, revision, storage, accounting, and distribution of all 
codes, ciphers, and other means of secret communication employed 
by the Army, (2) the interception, by electrical means, of enemy 
communications, (3) the location of enemy radio stations by gonio- 
metric means, (4) the detection and solution of all enemy secret 
co mmuni cations, and (5) the interception and monitoring of our own 
radio traffic for communications security purposes. 

c. The Signal Intelligence Service forms the subject-matter of this 
and the succeeding sections of this text, which deals with the way in 
which this service is organized, coordinated, and supervised, in order 
that it may function in as efficient a manner as possible. 

♦This part of the text was prepared under the joint direction of the Chief 
Signal Officer and the Assistant Chief of Staff, G-2. 

( 102 ) 
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86. Basic authority. — The functions of the Signal Corps referred 
to in paragraph 84a are those which are assigned to it by the Secretary 
of War under the following paragraphs of AE 105-5: 

SIGNAL COBPS 

GENERAL PROVISIONS 

******* 

2. Duties of the Chief Signal Officer. — In addition to such other duties as 
may be prescribed, the Chief Signal Officer will have immediate charge, under 
the direction of the Secretary of War, of the following: 

******* 

e. (As changed by Changes No. 1, August 21, 1034.) The preparation, 
publication, revision, storage, accounting, and distribution of all codes and 
ciphers required by the Army, and in time of war the interception of enemy 
radio and wire traffic, the goniometric location of enemy radio stations, the 
solution of intercepted enemy code and cipher messages, and laboratory arrange- 
ments for the employment and detection of secret inks. 

******* 

j. The general supervision, coordination, and standardization of all radio 
operations and the enforcement of regulations concerning the same. 

******* 

3. Unit signal officers. — a. A chief signal officer will be detailed for every 
expeditionary force and a Signal Corps officer as unit signal officer will normally 
be detailed for each corps area and every tactical unit larger than a brigade 
containing Signal Corps troops. When no unit signal officer has been so detailed 
in orders, the senior Signal Corps officer present for duty with the command will 
act as such. The unit signal officer will be a member of the staff of his command- 
ing officer. He will be charged, under the direction of his commanding officer, 
with the command, in so far as relates to operations, of signal troops not assigned 
or attached to subordinate units. The unit signal officer is also charged with 
specific duties as follows: 

* ***** 4 * 

(3) (As changed by Changes No. 1, August 21, 1034.) Preparation, pub- 
lication, storage, accounting, and distribution of codes and ciphers. 

******* 

(8) Supervision of the installation, maintenance, and operation of the 

signal communication system, including the message center, of the 
unit. 

(9) Supervision of such activities pertaining to the meteorological, signal 

intelligence, pigeon, and photographic services as affect the unit. 

* * * * * * * 

b. The corps area signal officers are also responsible under the policy of the 
War Department and the instructions of the Chief Signal Officer for all matters 
concerning the Signal Corps in their respective corps areas, including such matters 
in those posts, camps, and stations not within the jurisdiction of the corps area 
commander, but within the territorial limits of their respective commands, and 
excepting only those functions directly under the control of the Chief Signal 
Officer. 

86. Relations with the General Staff. — The military intelligence 
(G-2) division of each headquarters where signal intelligence activities 
are conducted exercises general staff supervision over the Signal In- 
telligence Service thereat, in accordance with the following para- 
graphs of Alt 10-15: 
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Section I 

WAR DEPARTMENT GENERAL STAFF 

* * * * * He * 

9. Military Intelligence Division, general duties. — a. The Military In- 
telligence Division is charged, in general, with those duties of the War Depart- 
ment General Staff which relate to the collection, evaluation, and dissemination 
of military information. 

6. The Military Intelligence Division is specifically charged with the prepare 
tion of plans and policies and the supervision of all activities concerning: 

******* 

(6) Codes and ciphers. 

* * * * * * • 



Section II 

GENERAL STAFF WITH TROOPS 

14. Organisation, distribution of duties. — The organization of the General 
Staff at headquarters of corps areas will be as herein prescribed for the War De- 
partment General Staff. At all other headquarters the General Staff will be 
divided into four divisions, among which shall be distributed, in accordance 
with the principles enunciated in these regulations, such of the duties of the War 
Department General Staff as apply to smaller units. * * * 

Section XVIII 



SPECIFIC FUNCTIONS OF THE SIGNAL INTELLIGENCE 

SERVICE 

Paragraph 



Derivation of functions 

Code and cipher preparation, publication, storage, accounting, and distri- 
bution 

Interception of enemy communications 

Radiogoniometry 

Code and cipher solution 

Secret inks 

Communications security 



87 

88 

89 

90 

91 

92 

93 



87. Derivation of functions. — a. The specific functions and 
duties of the Signal Intelligence Service are derived from the word- 
ing of the governing paragraphs in AR 105-5 quoted in paragraph 85. 
They are six in number, as follows: 

(1) Preparation, publication, storage, accounting, and distribu- 
tion of codes and ciphers employed by our own forces. 

(2) Interception of enemy radio and wire traffic by electrical 
means. 

(3) Location of enemy radio transmitting stations by goniometric 
means. 

(4) Solution of enemy codes and ciphers. 

(5) Laboratory arrangements for the selection and preparation of 
secret inks to be employed by our own authorized agents; and for the 
detection of the presence of secret-ink writing in enemy documents. 
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(6) Interception and monitoring of our own radio traffic in order 
to detect violations of regulations, and from the point of view of 
communications security. 

b. Each of the foregoing functions will be discussed separately in 
the subsequent paragraphs. 

88. Code and cipher preparation, publication, storage, ac- 
counting, and distribution. — This function involves, in time of 
war as well as in time of peace, the preparation, publication, revision, 
storage, accounting, and distribution of all codes, ciphers, and other 
means of secret communications which are to be employed by the 
Army. 

89. Interception of enemy communications. — This function 
involves, in time of war, the interception, by electrical means, of 
enemy communications, including their press reports; in time of 
peace, the necessary organization and training of personnel and the 
necessary development of equipment to enable the Signal Corps to 
conduct intercept work successfully immediately upon the outbreak 
of war.- In this connection, it should be noted that the Signal Corps 
is responsible for the interception of enemy messages by electrical 
means only. It has no responsibility for the interception of enemy 
communications through postal censorship measures or by means of 
personal contact with enemy agents, with prisoners of war, or by any 
other personal contacts. 

90. Radiogoniometry. — This function involves, in time of war, 
the location of enemy radio transmitting stations by radiogoniometry; 
in time of peace, the necessary organization and training of person- 
nel and the necessary development of equipment to enable the Signal 
Corps to conduct this work successfully immediately upon the out- 
break of war. 

91. Code and cipher solution. — This function involves, in time 
of war, the solution of all code, cipher, or other disguised enemy 
messages or documents that may be intercepted by the Army or 
forwarded by other agencies to the Army for solution; in time of 
peace, the necessary research work and the organization and training 
of personnel to enable the Signal Corps to conduct this work suc- 
cessfully immediately upon the outbreak of war. 

92. Secret inks. — This function involves, in time of war, labora- 
tory arrangements for (1) the selection and preparation of secret 
inks to be employed by authorized agents of our own forces, and (2) 
the detection of the presence of secret-ink writing in intercepted 
enemy documents; in time of peace, the necessary research work and 
the organization and training of personnel to enable the Signal Corps 
to conduct this work successfully immediately upon the outbreak of 
war. 
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93. Communications security. — Under current regulations, the 
actual employment of codes and ciphers within the organization to 
which they are distributed for use in encoding or enciphering and de- 
coding or deciphering messages is a function of the message center of 
that organization. In organizations down to and including the 
division, the message centers are operated by Signal Corps personnel; 
in those below the division, they are operated by personnel assigned 
by the commanders of the organizations to serve under the unit signal 
officer. Although message centers are in no way organically related 
to the Signal Intelligence Service and the work done at message cen- 
ters is not performed by signal intelligence personnel, nevertheless 
the proper employment of codes and ciphers by all message center 
personnel is an important phase of secret communication. Should 
they be employed improperly, their secrecy and the secrecy of the 
entire code or cipher system are jeopardized. As an outgrowth of 
paragraph 2j, AB 105-5, in time of war as well as in time of peace, the 
supervision of the use of codes and ciphers by all Army personnel, 
with a view to insuring their proper employment, is a responsibility 
of the Signal Corps and is a function of specially assigned personnel 
of the Signal Intelligence Service. This duty, by inference at least, 
requires the interception of our own radio traffic from time to time 
with a view to its examination for infractions of regulations established 
to preserve secrecy of codes and ciphers. 

Section XIX 



TYPES AND ACTIVITIES OF SIGNAL INTELLIGENCE 

UNITS 



Paragraph 

Number of types 94 

War Department unit^ , 95 

Corps area or department unit 96 

General headquarters unit 97 

Field army unit 98 



94. Number of types. — a. Depending upon where signal intelli- 
gence activities are conducted, there are four types of signal intelli- 
gence units, with somewhat different duties. These four types of 
units are as follows: 

(1) War Department. 

(2) Corps area or department. 

(3) General headquarters. 

(4) Field army. 

b. Each type of unit is discussed in the succeeding four paragraphs, 
but only general outlines can be indicated. 

96. War Department unit. — a. The War Department signal in- 
telligence unit operates at the War Department, in Washington, 
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under the direct control of the Chief Signal Officer. General staff 
supervision over its activities is exercised by the G-2 division of the 
War Department General Staff. 

b. The duties of the War Department unit are as follows: 

(1) The preparation, publication, storage, accounting, and distri- 
bution of all codes and ciphers and other means of secret communica- 
tion employed by the Army, except that, when established, the signal 
intelligence unit at the general headquarters of field or expeditionary 
forces will take over the preparation of such field codes and ciphers 
as are required for current replacement within the theater of opera- 
tions. 

(2) The interception, by electrical means, of enemy communica- 
tions emanating from stations not in the theater of operations. 

(3) The radiogoniometric location of the enemy stations from which 
these intercepted communications emanate. 

(4) The solution of secret or disguised enemy co mmuni cations 

including those written in code or cipher, or those employing other 
means for disguiscment. v* -p-- 

(5) Work with secret inks, to consist in the establishment of a lab- 

oratory for the detection of 'secret-i&k - wri t ing- i a .i nter cepted enemy 
communications and for the selection' i kttd jp«eparation of suitable 
secret inks to be employed by authorised 5 agents of the War Depart- 
ment. ’ • '<■'} 

(6) The supervision of Army radio and wire traffic within the zone 
of the interior from the point of view of communications security. 

96. Corps area or department unit. — a. A signal intelligence 
unit is assigned to each of such corps areas and departments as may 
be directed by the War Department. The unit operates under the 
direct control of the corps area (or department) signal officer. Gen- 
eral staff supervision over its activities is exercised by the G-2 
division of the corps area (or department) general staff. 

b. The duties of a corps area or department unit are as follows: 

(1) The interception, by electrical means, of enemy communications 
emanating from stations not in the theater of operations. 

(2) The radiogoniometric location of the enemy stations from 
which these intercepted communications emanate. 

(3) The solution of secret or disguised enemy communications 
including those written in code or cipher, or those employing other 
mea n s for disguisement. 

(4) The supervision of radio and wire traffic from the point of view ■ 
of communications security. 

. 97. General headquarters unit. — a. A signal intelligence unit is 

;< organized promptly upon the establishment of, and is assigned to, the 
I”; general headquarters of field or expeditionary forces. A GHQ signal 
|| intelligence unit operates under the direct control of the Chief 
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Signal Officer of the field or expeditionary forces. General staff super- 
vision over its activities is exercised by the G-2 division of the GHQ 
General Staff. 

b. The duties of a GHQ unit are as follows: 

(1) The preparation, publication, storage, accounting, and distribu- 
tion of such field codes and ciphers as are required as replacements 
for those issued by the War Department to units of the field forces 
upon their mobilization, and, as directed by the commanding general of 
the field or expeditionary forces, the preparation, publication, storage, 
accounting, and distribution of such special codes and ciphers as may 
be necessary to meet local or special needs in the theater of operations. 

(2) The interception, by electrical means, of enemy communications 
emanating from the larger or more important stations in the theater 
of operations. 

(3) The radiogoniometric location of the enemy stations from which 
these intercepted communications emanate. 

(4) Solution of secret or disguised enemy communications includ- 
ing those written in code or cipher or those employing other means 
for disguisement. 

(5) Work with secret inks to consist in the establishment of a 
laboratory for the detection of secret-ink writing in intercepted enemy 
communications and for the selection and preparation of suitable 
secret inks to be employed for authorized agents of the commanding 
general of the field or expeditionary forces. 

(6) Supervision of the radio and wire traffic of organizations sub- 
ordinate to the GHQ, from the point of view of communications 
security. 

(7) Study of such captured enemy documents as relate to the signal 
service of the enemy and are forwarded to it by the G-2 division of the 
GHQ General Staff. 

98. Field army unit. — a. A signal intelligence unit is assigned to 
each field army. The unit operates as a part of the Army signal 
service under the direct control of the Army signal officer. General 
staff supervision over its activities is exercised by the G-2 division of 
the general staff of the field army which the unit serves. 

b. Its duties are: 

(1) The interception of enemy radio and wire communications by 
electrical means. 

(2) The radiogoniometric location of enemy radio transmitting 
stations in the army sector. 

(3) Code and cipher solution to include only the translation of 
intercepted enemy code or cipher messages by the assistance of 
information furnished by the GHQ signal intelligence unit. 

(4) Supervision of the radio and wire traffic of organizations 
subordinate to the field army concerned, from the point of view of 
communications security. 
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Section XX 

GENERAL ORGANIZATION AND OPERATION 

Paragraph 



General organization 99 

General operation 100 



99. General organization. — a. Each of the four types of signal 

intelligence units mentioned in the preceding four paragraphs is 
organized in accordance with authorized Tables of Organization 
applicable to the headquarters to which the unit is assigned. Tables 
applicable to GHQ and Army signal intelligence units are shown in f 

Tables of Organization Nos. 208W and 508W. It will he noted that 
signal intelligence work is conducted by Signal Corps personnel 
organized into specific sections which, taken as a group, comprise 
the signal intelligence service unit under the signal service (Army, 

GHQ, etc.) of those headquarters. It will further be noted that 
radio interception and radiogoniometry are performed by regularly 
constituted radio intelligence companies (T/O 21 1W), which are, 
however, under the technical and tactical control of the officer in 
charge of the Signal Intelligence Service at the headquarters to which 
they are assigned. 

b. War Department and corps area and department signal intelli- 
gence units are organized in accordance with the services each is 
intended to perform, following, in general, the pattern set up for the 
GHQ and Army signal intelligence units. 

100. General operation. — a. The signal intelligence unit at each 
headquarters to which it is assigned operates as a Signal Corps activity 
directly under the administrative control of the (Chief) Signal Officer 
of that headquarters. As in all other similar cases, the unit conduct- 
ing the activity at any headquarters is under control of the com- 
manding general thereof. The G-2 division of the headquarters staff 
exercises close general staff supervision over the unit and coordinates 
its activities, for reasons which will soon become apparent. 

b. Specific details concerning the way in which the various activities 
of the Signal Intelligence Service are conducted cannot, of course, 
here be given; only brief outlines are presented below: 

(1) Code and cipher preparation, publication, storage, accounting, and 
distribution . — During time of peace the War Department signal intel- 
ligence unit, under the Chief Signal Officer, prepares, publishes, revises, 
stores, accounts for, and distributes all codes, ciphers, and other means 
of secret communication employed by the Army in time of peace 
including field codes for training purposes and for employment by 
combat units on active service. It prepares, publishes, and stores a 
sufficient number of reserve editions of the field codes for prompt 
issue to troops upon mobilization for active service. Upon mobiliza- 
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tion, the War Department signal intelligence unit continues the prepa- 
ration, publication, revision, storage, accounting, and distribution of 
all means of secret communication, except that after mobilization the 
preparation, publication, revision, storage, accounting, and distribu- 
tion of field codes, and of such special codes and ciphers as are specifi- 
cally for use in the theater of operations, become a responsibility of 
the GHQ signal intelligence unit. It should be noted that code and 
cipher compilation, publication, storage, accounting, and distribution 
are performed only by the War Department and GHQ signal intel- 
ligence units. 

(2) Interception of enemy communications . — The interception of 
enemy communications by electrical means is primarily radio inter- 
ception, but, in the combat zone especially, also entails the intercep- 
tion of enemy communications by any other electrical means, such as 
inductive or direct contact with electrical circuits carrying enemy 
messages whenever and wherever this procedure is. practicable. A 
certain amount of radiogoniometric work is required in connection 
with radio interception for the purpose of locating and identifying 
the enemy station the traffic of which is being intercepted. The 
close relationship between interception and goniometric location is 
evident. The signal officer of the headquarters routes messages or 
press reports intercepted in clear language to the G 2 division of the 
headquarters staff and routes messages intercepted in code or cipher 
to his signal intelligence unit for solution. It will be noted that, in 
time of war, intercept activities are conducted by all four types of 
signal intelligence units. 

(3) Radiogoniometry . — This activity entails the location of enemy 
radio tr ansmi t ting stations by means of radiogoniometric stations 
located at critical points within the area under the jurisdiction of the 
headquarters to which this activity is assigned. Location of the 
enemy transmitting stations and the determination of the tactical 
unit which each such station serves, that is, whether it is an army, 
corps, division, brigade, regimental, or battalion station, indicate 
the tactical disposition of the enemy, and the determination of enemy 
stations as belonging to particular units indicates the enemy battle 
order. The obtaining of this very important information is one of 
the major functions of the radio intelligence company serving a field 
army. To a lesser extent this may also be a function of the radio 
intelligence company serving GHQ. The signal officer of the head- 
quarters routes the information collected by this activity to the G-2 
division of the headquarters staff; he also, of course, supplies this 
information directly to his solution section. It will be noted that, in 
time of war, radiogoniometric activities are conducted by all four 
types of signal intelligence units, but radiogoniometric work specif- 
ically connected with the determination of the enemy order of battle 
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is conducted primarily by Army Signal Intelligence Service, secondarily 
by GHQ signal intelligence service. Very little, if any, such work is 
conducted by the War Department or a corps area (or department) 
signal intelligence service. The latter conduct only such radio gonio- 
metric studies as are needed to identify the particular radio stations 
whose traffic is being intercepted by them. 

(4) Code and cipher solution . — At any headquarters to which a 
signal intelligence unit is assigned, all enemy communications which 
are in secret or disguised form and which are obtained either by 
radio interception or from other sources ultimately reach the code j 

and cipher solution section of the signal intelligence unit for solution. ^ 

Solved communications axe routed by the signal officer of the head- 
quarters to the G 2 division of the headquarters staff. It should be 
noted that solution activities are conducted by all four types of signal 
intelligence units, but with sections differing in scope and personnel. 

It is probable that, as regards solution activities, (a) the War De- 
partment signal intelligence unit, and (b) a corps area or department 
signal intelligence unit will deal mostly with cryptograms conveying 
diplomatic or general information, while (c) a GHQ signal intelli- 
gence unit and (d) the respective signal intelligence units of the 
several field armies under GHQ will deal primarily with cryptograms 
conveying combat or tactical information. Therefore, it is evident 
that, as regards solution activities, the two former types of signal 
intelligence units, (a) and (b), should operate independently of the 
two latter types, (c) and (d), except that technical information should 
be freely interchanged between all units. It is further evident that, 
as regards the solution of enemy codes and ciphers, the War Depart- 
ment signal intelligence unit and the respective corps area or de- 
partment signal intelligence units deal with the same types of enemy 
codes and ciphers (diplomatic) and seek the same kind of information, 
and that the solution sections of these two types of units should, for 
the sake of efficiency, work in the closest cooperation; likewise, and 
in the same regard, it is evident that a GHQ signal intelligence unit 
and the respective signal intelligence units of the several field armies 
under GHQ deal with the same types of enemy codes and ciphers 
(tactical) and seek the same kind of information, and that the solu- 
tion sections of these two types of units should, for the sake of effi- 
ciency, work in the closest cooperation. Therefore, the War Depart- 
ment signal intelligence unit, and a GHQ signal intelligence unit 
should be organized to carry ( out to the fullest extent the work of 
solving any and all disguised enemy co mm unications which may be 
received, while corps area or department signal intelligence units and 
field army signal intelligence units may be organized with less person- 
nel and may operate in a less extensive manner, placing dependence 
upon the solved enemy codes and cipher keys which have been 
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previously worked out and furnished them by the solution section of 
the larger signal intelligence unit with which they are most closely 
allied. In case the solution section of a corps area or department 
signal intelligence unit or that of a field army signal intelligence unit 
obtains messages in a code or cipher concerning which it has re- 
ceived no data or which it is unable to solve, such messages are to be 
forwarded to the solution section of the larger signal intelligence 
unit (War Department or GHQ, respectively) for solution. 

! (5) Secret inks . — Secret ink laboratories are assigned only to the 

War Department signal intelligence unit and to a GHQ signal intel- 
ligence unit. These are small laboratories which serve two main 
purposes: (a) the detection of secret-ink writing in intercepted 
enemy communications, and (b) the selection and preparation of 
certain inks suitable for our own use. These laboratories conduct 
research work which will enable them to draw up instructions for 
certain simple and general measures to be employed by such per- 
sonnel as censorship officials, and others who come in contact with 
suspected documents. In case these measures fail, the documents, 
if still suspected, are forwarded to the laboratory for final test. The 
laboratories also conduct research work which will enable them to 
select and draw up instructions for the use of suitable secret inks by 
such of our own agents who may be authorized to employ them. 

(6) Supervision of radio and wire traffic . — The signal officer estab- 
lishes a communications security section as a part of his signal intel- 
ligence unit. This section conducts independent radio and wire 
intercept operations directed toward obtaining samples of our own 
traffic. The signal officer assigns specific periods when personnel of 
his radio intelligence company direct their attention to transmissions 
by our own forces. Traffic from this source is turned over to the 
solution section for study and examination. If infractions of rules 
for the use of codes and ciphers, or carelessness and blunders are 
noted, the matter is taken up through normal official channels with 
a view to their correction or, if persisted in, the application of disci- 
plinary measures. In addition to such intercept activities, the 
monitoring of telephone lines, in order to eliminate or reduce impru- 
dent conversation over this important source of information, may be 
conducted by specially designated, personnel. 
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GENERAL STAFF RESPONSIBILITY 

Puagnph 

General Staff responsibility 101 

101- General Staff responsibility . — a. The military intelligence 
(G-2) division of the headquarters to which signal intelligence 
activities are assigned is responsible for policies with reference to 
and the General Staff supervision of the signal intelligence service 
at that headquarters. The point of contact is the communications 
section of the G-2 division. The contact between the G-2 division 
of the General Staff and the unit rendering the signal intelligence 
is perhaps closer than between any other General Staff division and 
an operating branch, since, in a very real sense, the signal intelligence 
unit operates largely as an information collecting agency for the 
G-2 division, and the latter depends upon the former for the very 
vital information that a well-organized signal intelligence unit can 
furnish. Communications between the G-2 division and the signal 
intelligence unit are handled by the G-2 communications section. 
Information of interest to G-2 obtained by the signal intelligence 
unit is routed by the signal officer of the headquarters to the office 
of G-2 where it is handled by the G-2 communications section 
and distributed by that section to other interested G-2 branches, 
unless a more direct routing has been previously arranged. 

b. Close personal liaison should be maintained between the G-2 
communications section and the signal intelligence unit. The 
General Staff officer bears in mind that General Staff policies with 
reference to an operating branch must be general in character, and 
that in forming them every consideration must be given to the 
requirements of the technique of the operating branch, with which 
the General Staff officer should be in general familiar. General 
Staff policies determine what result is desired from the operating 
branch; the operating branch determines how this result is to be 
accomplished. The result desired having been enunciated, the 
General Staff officer bears in mind that he is a coordinating agent 
and not a directing one. He coordinates the activities of the oper- 
ating agency with the activities of other operating agencies over 
which it has no control. The above may be considered as a defini- 
tion of General Staff supervision. 




